AS201240 - OpenIoT Rocket NGPARFC 4890 ✓RPKI ✓ 1/1ASPA -

AS overview

Test target: 2a07:eec0:1::8 · openiot.at · address space: PA · prefixes announced: 1

prefix(es): 2a07:eec0::/29

VIX / AAIX / SAIX / TIROL-IX / ERA-IX peering

Random-IP probe (yarrp) into the AS' prefixes

We probed 35 arbitrary IPv6 address(es) inside AS201240's announced prefix(es). No router inside the prefix responded. The deepest visible hop was 2a02:1b8:10:161::2 at hop 24 - that router answers ICMPv6 Echo. This is not in AS201240's announced prefix; operationally it's the AS-edge / peering interface (often on an IXP peering address or an upstream's /127 link). The traceroute boundary is the AS edge: ICMPv6 Time-Exceeded responses from anything inside this AS are filtered.

ICMPv6 Type 2 (Packet Too Big) acceptance - active test

Type 2 honored. Forged ICMPv6 PTB (MTU=1280) was accepted by the destination's stack: the next 1500-byte Echo Reply arrived split into 2 fragments via the IPv6 Fragment Header.
method: ICMPv6 Echo + forged PTB, tested 2026-09-22T13:56:09Z

Multi-vantage path map

Every hop of all vantages’ traceroutes toward the target, drawn left→right, grouped into per-AS bubbles (a hop seen from several vantages is one shared bubble, so converging paths merge). It answers two questions per vantage — shown on each source bubble as echo ✓/⚠/✗ · trace ✓/✗: did the destination reply to ICMPv6 Echo (✓ honored, ⚠ replied but PTB not honored, ✗ no reply), and did the traceroute reach it. A line to the target is drawn only when that vantage got an echo reply — solid if the PTB was honored, dashed if not (reachable but a broken-PMTUD / RFC 4890 violation). The path depth still shows how far the traceroute itself got, and runs of unanswered (* *) hops collapse into one dashed “silent” bubble. Open full size ↗

• ● SRB host (SOX, Belgrade)
• ● DE host (Berlin)
• ● DE host (Düsseldorf)
• ● NL host (go6lab)
• ● ITA host (Karsolink)
• ● SLO host (6connect)
• ● SLO host (T-2)
• ── solid line = echo reply, PTB honored (clean reach)
• — — dashed line = echo reply but PTB not honored (RFC 4890 violation)
• no line = no echo reply (never reached)
• ◉ target: green = clean, amber = reachable-but-violation / unreachable
• ⚠ suspected drop AS
• ⋯ silent (unanswered) hops
• ● IXP hop

From SRB host (SOX, Belgrade)   openRFC 4890 ✓

filter likely at: (none) · min PMTU on path: 1500

Path (traceroute + mtr + PTR)

tracepath -6

 1?: [LOCALHOST]                        0.010ms pmtu 1500
 1:  _gateway                                              0.581ms 
 1:  _gateway                                              0.566ms 
 2:  sox-pn.sox.rs                                         0.362ms 
 3:  2001:7f8:1e:8::3d                                     0.680ms asymm  2 
 4:  ae8-930.RT.IRX.VIE.AT.retn.net                       12.606ms asymm  3 
 5:  2001:7f8:30:0:2:1:4:7692                             13.078ms asymm  3 
 6:  2a02:1b8::46:1                                       13.235ms asymm  4 
 7:  2a02:1b8:10:161::2                                   13.408ms asymm  5 
 8:  openiot.network                                      14.077ms reached
     Resume: pmtu 1500 hops 8 back 6 

From DE host (Berlin)   openRFC 4890 ✓

filter likely at: (none) · min PMTU on path: 1500

Path (traceroute + mtr + PTR)

tracepath -6

 1?: [LOCALHOST]                        0.026ms pmtu 1500
 1:  xe-0-0-13-178.gw01.ber01.as59645.net                  0.623ms 
 1:  xe-0-0-13-178.gw01.ber01.as59645.net                  0.575ms 
 2:  ae0-2453.cr10.ber01.lwlcom.net                        0.893ms 
 3:  ae3-90.cr10.ham01.lwlcom.net                          5.080ms 
 4:  ae0-50.cr11.ham01.lwlcom.net                          5.246ms 
 5:  2a00:c380:f000::4b                                    5.730ms asymm  4 
 6:  ae4-2087.dus10.core-backbone.com                     11.718ms asymm  5 
 7:  ae21-2071.fra10.core-backbone.com                    10.987ms asymm  5 
 8:  ae2-2021.fra20.core-backbone.com                     11.000ms asymm  4 
 9:  ae6-2003.nbg20.core-backbone.com                     12.374ms asymm  6 
10:  ae2-2032.muc20.core-backbone.com                     15.087ms asymm  7 
11:  ae1-2028.vie10.core-backbone.com                     20.480ms asymm  8 
12:  2a01:4a0:1338:218::2                                 21.520ms asymm  7 
13:  2a02:1b8::49:1                                       21.175ms asymm  6 
14:  2a02:1b8::46:1                                       21.462ms asymm  5 
15:  2a02:1b8:10:161::2                                   21.369ms asymm  6 
16:  openiot.network                                      22.396ms reached
     Resume: pmtu 1500 hops 16 back 7 

From DE host (Düsseldorf)   openRFC 4890 ✓

filter likely at: (none) · min PMTU on path: 1500

Path (traceroute + mtr + PTR)

tracepath -6

 1?: [LOCALHOST]                        0.016ms pmtu 1500
 1:  xe-0-0-12-142.gw01.dus01.as59645.net                  0.340ms 
 1:  xe-0-0-12-142.gw01.dus01.as59645.net                  0.334ms 
 2:  eth1-0-12-h5594.edge5-dus1.bb.wiit.network            1.155ms 
 3:  no reply
 4:  lag30.core3-dus1.bb.wiit.network                      0.473ms 
 5:  lag8.core1-dus-ix.bb.wiit.network                     0.497ms 
 6:  decix.edge01.fra.nessus.at                           20.549ms asymm  7 
 7:  2a02:1b8::43:1                                       20.302ms asymm  6 
 8:  2a02:1b8:10:161::2                                   20.466ms asymm  7 
 9:  openiot.network                                      21.137ms reached
     Resume: pmtu 1500 hops 9 back 8 

From NL host (go6lab)   openRFC 4890 ✓

filter likely at: (none) · min PMTU on path: 1500

Path (traceroute + mtr + PTR)

tracepath -6

 1?: [LOCALHOST]                        0.046ms pmtu 1500
 1:  2a00:8642:42::2                                      12.052ms 
 1:  2a00:8642:42::2                                       1.737ms 
 2:  gw.friends.steffann.nl                                2.669ms 
 3:  2a00:1ca8:1::194                                      2.958ms 
 4:  2a03:3f40::10:41                                      3.198ms 
 5:  2001:b28:3ff::136:249                                22.716ms asymm  8 
 6:  2a02:1b8::49:1                                       33.948ms asymm  7 
 7:  2a02:1b8::46:1                                       20.489ms 
 8:  2a02:1b8:10:161::2                                   19.614ms 
 9:  openiot.network                                      21.299ms reached
     Resume: pmtu 1500 hops 9 back 9 

From ITA host (Karsolink)   openRFC 4890 ✓

filter likely at: (none) · min PMTU on path: 1500

Path (traceroute + mtr + PTR)

Rate-limited ICMPv6: hop 3, hop 7 (loss between 5% and 95% across mtr cycles - the router replies but only sometimes).

tracepath -6

 1?: [LOCALHOST]                        0.029ms pmtu 1500
 1:  karsolink-01.net.karsolink.com                        0.826ms 
 1:  no reply
 2:  no reply
 3:  no reply
 4:  no reply
 5:  be47.core1.mil2.he.net                               75.792ms 
 6:  be1.core1.zrh2.he.net                                15.681ms 
 7:  be10.core4.fra1.he.net                               21.558ms 
 8:  no reply
 9:  no reply
10:  2a02:1b8::43:1                                       21.730ms asymm  7 
11:  2a02:1b8:10:161::2                                   21.579ms asymm  8 
12:  openiot.network                                      21.325ms reached
     Resume: pmtu 1500 hops 12 back 9 

From SLO host (6connect)   openRFC 4890 ✓

filter likely at: (none) · min PMTU on path: 1500

Path (traceroute + mtr + PTR)

tracepath -6

 1?: [LOCALHOST]                        0.030ms pmtu 9000
 1:  fw1-lju.6connect.com                                  0.725ms 
 1:  fw1-lju.6connect.com                                  0.638ms 
 2:  no reply
 3:  no reply
 4:  2a00:ee0:1:10::2                                      1.682ms asymm  3 
 5:  2a00:ee0:1:15::2                                      2.061ms pmtu 1500
 5:  decix.edge01.fra.nessus.at                           15.097ms asymm  7 
 6:  2a02:1b8::43:1                                       14.962ms 
 7:  2a02:1b8:10:161::2                                   15.154ms 
 8:  openiot.network                                      15.343ms reached
     Resume: pmtu 1500 hops 8 back 8 

From SLO host (T-2)   openRFC 4890 ✓

filter likely at: (none) · min PMTU on path: 1500

Path (traceroute + mtr + PTR)

Rate-limited ICMPv6: hop 6 (loss between 5% and 95% across mtr cycles - the router replies but only sometimes).

tracepath -6

 1?: [LOCALHOST]                        0.030ms pmtu 1500
 1:  no reply
 2:  2a01:260:1::225                                       3.054ms 
 3:  2a01-260-1-1--9c.core6.t-2.net                        2.864ms 
 4:  2a01-260-1-1--38.core6.t-2.net                        2.917ms asymm  3 
 5:  no reply
 6:  100ge0-0-0-31.core1.vie1.he.net                      12.799ms asymm  5 
 7:  2a02:1b8::46:1                                       10.534ms asymm  6 
 8:  2a02:1b8::46:1                                        9.313ms asymm  6 
 9:  openiot.network                                      10.900ms reached
     Resume: pmtu 1500 hops 9 back 8