[xxdesmus]

CloudFlare has DNSSEC and a REST API (https://api.cloudflare.com/) but not SSHFP at this time, that's likely coming in the not too distant future though.

I believe Rage4 https://rage4.com/ checks all the boxes you're looking for.

Disclaimer: I work at CloudFlare.

[SunSparc]

Thanks. CloudFlare and Rage4 are on my list. CloudFlare was one of the first places I looked.