...
2) The querying server will then query the label _radsec._tcp.eduroam.aq and check for SRV records. The eduroam.aq zone is managed by your national eduroam admins, and the reply could look like the following:
_radsec._tcp.eduroam.luaq. 43200 IN SRV 10 0 2083 tld2.eduroam.lu.
_radsec._tcp.eduroam.luaq. 43200 IN SRV 0 0 2083 tld1.eduroam.lu.
...