Has the KSK rolled?

YES: the root DNSKEY is currently signed by key tag 20326 (KSK 2017)

The root KSK rollover is currently planned for 1600 UTC on 11 October 2018. More information