IPv4 Addresses
roots.io. 300 IN A 104.21.23.211 roots.io. 300 IN A 172.67.213.173
IPv6 Addresses
roots.io. 300 IN AAAA 2606:4700:3034:0:0:0:AC43:D5AD roots.io. 300 IN AAAA 2606:4700:3035:0:0:0:6815:17D3
Name Servers
roots.io. 1200 IN NS jim.ns.cloudflare.com. roots.io. 1200 IN NS kim.ns.cloudflare.com.
Mail Servers
roots.io. 300 IN MX 1 aspmx.l.google.com. roots.io. 300 IN MX 5 alt1.aspmx.l.google.com. roots.io. 300 IN MX 5 alt2.aspmx.l.google.com. roots.io. 300 IN MX 10 alt3.aspmx.l.google.com. roots.io. 300 IN MX 10 alt4.aspmx.l.google.com.
SOA Details
roots.io. 1200 IN SOA jim.ns.cloudflare.com. dns.cloudflare.com. 2402537131 10000 2400 604800 1800
Certificate Authority Authorization
No CAA records were returned at this registrable domain name. With no CAA policy, any public certificate authority (CA) may issue TLS certificates for names under this zone unless a parent publishes CAA; add issue / issuewild / iodef records to restrict issuance.
DMARC
Organizational policy (p): how receivers treat mail that fails aligned DMARC checks — none (monitor only), quarantine (often junk), or reject (block).
pct: share of mail that gets quarantine/reject; 100 = all failing messages (default).
100Aggregate DMARC reports (ZIP/XML). Optional but recommended for visibility.
Forensic (per-failure) reports. Often omitted for privacy or volume.
roots.io. 300 IN DMARC v=DMARC1; p=quarantine; pct=100; rua=mailto:[email protected],mailto:[email protected];
DKIM
roots.io. 300 IN DKIM v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCpzAaF0PKZEFv6BJwptHkoSy4zsu6RP3GcjBR5MMEPUK9Jm847p/kAt4ADRu98O3oMZCJ3IRTPaVds9xZaSk6UYJ3VxKoW4lUD6GpY1i4akDJYB1i+rDP2rcG6Iur+rQ4gwPZTipanZQ5O09zCcbRkcZCV6Gx9InV3daoLK/miPQIDAQAB
SPF (Sender Policy Framework)
| Qualifier | Mechanism | Target / value | Valid | Details |
|---|---|---|---|---|
| + Pass | mx |
—
|
|
|
| + Pass | include |
|
||
| + Pass | include |
|
||
| ~ Softfail | all |
—
|
|
roots.io. 300 IN TXT "v=spf1 mx include:mailgun.org include:_spf.google.com ~all"
MTA-STS
This hostname does not publish an MTA-STS policy (no v=STSv1 TXT at _mta-sts.<name> and/or no policy at https://mta-sts.<name>/.well-known/mta-sts.txt).
Text Content
roots.io. 300 IN TXT "google-site-verification=wBjMe2WIo01g1tFW9a5QYmyeVE7gy_2KU-coOH_Wc38" roots.io. 300 IN TXT "stripe-verification=77fc24e33c3dd3834e9b3ddf1dc0dff92441774122a13f6a63e4c1c4b5a6acee"