AS25255 - H3G-Austria-AS Hutchison Drei AustriaPI/PARFC 4890 ✓RPKI ✓ 5/5ASPA -

← back to summary

All countriesHomeState of IPv6TopologyIXPsAboutipv6.si ↗ Sparky

AS overview

Test target: 2a02:2861:e::2 · static prefix probe · address space: mixed · prefixes announced: 5

prefix(es): 2a02:2861:d::/48, 2a02:2864::/30, 2a02:2861::/32, 2a07:7e82::/40, 2a02:2861:e::/48

Targets & per-vantage-point probe results (1 target(s) across 7 vantage point(s))

Source codes (hover any badge for full description): CUR=curated · NS/SOA/MX=DNS records · SPF=SPF TXT · DRV=holder-derived (www, ns1, mail, gw, …) · ATL=RIPE Atlas · PDB=PeeringDB · WHOIS=RIPE whois · RDAP=RIPE RDAP · HIT=IPv6 Hitlist · RTR=in-prefix path hop (router) · PRB=static prefix probe · SYN=synthetic prefix::1 fallback

Target IP / hostnameSourceSRB host (SOX, Belgrade)DE host (Berlin)DE host (Düsseldorf)NL host (go6lab)ITA host (Karsolink)SLO host (6connect)SLO host (T-2)
ping1500B:80:443reachedping1500B:80:443reachedping1500B:80:443reachedping1500B:80:443reachedping1500B:80:443reachedping1500B:80:443reachedping1500B:80:443reached
2a02:2861:e::2prbopenopen-openopen-openopen-openopen-openopen-openopen-openopen-

VIX / AAIX / SAIX / TIROL-IX / ERA-IX peering

VIX / AAIX / SAIX / TIROL-IX / ERA-IX member - Open peering, peering member, since 2013-07-02. IPv6 LAN: 2001:7f8:30:0:2:1:2:5255. Locations: -.

RPKI & ASPA

5 of 5 prefix(es) covered by a valid ROA.

PrefixRPKI stateReasonCovering VRP(s)
2a02:2861:d::/48✓ validmatched VRP (correct origin, length within maxLength)AS25255 /48 maxLen 48 (ripe); AS25255 /32 maxLen 32 (ripe)
2a02:2864::/30✓ validmatched VRP (correct origin, length within maxLength)AS25255 /30 maxLen 30 (ripe)
2a02:2861::/32✓ validmatched VRP (correct origin, length within maxLength)AS25255 /32 maxLen 32 (ripe)
2a07:7e82::/40✓ validmatched VRP (correct origin, length within maxLength)AS25255 /40 maxLen 40 (ripe); AS202870 /29 maxLen 40 (ripe)
2a02:2861:e::/48✓ validmatched VRP (correct origin, length within maxLength)AS25255 /48 maxLen 48 (ripe); AS25255 /32 maxLen 32 (ripe)

Random-IP probe (yarrp) into the AS' prefixes

We probed 70 arbitrary IPv6 address(es) inside AS25255's announced prefix(es). No router inside the prefix responded. The deepest visible hop was 2001:470:0:2ec::2 at hop 12 - that router does not answer ICMPv6 Echo. This is not in AS25255's announced prefix; operationally it's the AS-edge / peering interface (often on an IXP peering address or an upstream's /127 link). The traceroute boundary is the AS edge: ICMPv6 Time-Exceeded responses from anything inside this AS are filtered.

ICMPv6 Type 2 (Packet Too Big) acceptance - active test

Type 2 honored. Forged ICMPv6 PTB (MTU=1280) was accepted by the destination's stack: the next 1500-byte Echo Reply arrived split into 2 fragments via the IPv6 Fragment Header.
method: ICMPv6 Echo + forged PTB, tested 2026-09-24T13:30:55Z

Where the path divergence is

Per-vantage probe + verdict (headline):

Full per-method matrix (all four methods run at each vantage):

vantageicmp6-echodns-tcptlshttp
belgradehonoredno_tcppartialinconclusive
berlinhonoredno_tcpnot_honoredinconclusive
duseldorfhonoredno_tcppartialinconclusive
go6labhonoredno_tcpnot_honoredinconclusive
karsolinkhonoredno_tcpnot_honoredinconclusive
odinhonoredno_tcpnot_honoredinconclusive
t2honoredno_tcpnot_honoredinconclusive

✓ All vantages agree on method(s): icmp6-echo - the headline-method spread above is dispatcher noise, not a real Type 2 disagreement.

These vantage-level disagreements are rooted somewhere in the forward paths. Joining each per-vantage traceroute against the IP→AS lookup from our global yarrp mesh, the first hop where the paths land in different ASes is the most likely site of the offending filter / unreachable AS / Type 2 drop.

Suspect transit ASes (ranked by how often they appear at the divergence point on the path of the worse-classifying vantage): AS6939, AS50629, AS5405.

Diagnosis is path-level, not packet-level: it tells you which transit AS is the prime suspect, not exactly which firewall rule is to blame. Use the tracepath6 output below (when available) for per-hop PMTU evidence on the same path.

Diagnostic interpretation

An operator-targeted diagnostic interpretation can be generated for this AS on demand. The pipeline holds the raw verdicts and the per-hop walk; an AI pass synthesises where to start looking. Click the button below to run it.

Multi-vantage path map

Every hop of all vantages’ traceroutes toward the target, drawn left→right, grouped into per-AS bubbles (a hop seen from several vantages is one shared bubble, so converging paths merge). It answers two questions per vantage — shown on each source bubble as echo ✓/⚠/✗ · trace ✓/✗: did the destination reply to ICMPv6 Echo (✓ honored, ⚠ replied but PTB not honored, ✗ no reply), and did the traceroute reach it. A line to the target is drawn only when that vantage got an echo reply — solid if the PTB was honored, dashed if not (reachable but a broken-PMTUD / RFC 4890 violation). The path depth still shows how far the traceroute itself got, and runs of unanswered (* *) hops collapse into one dashed “silent” bubble. Open full size ↗

multi-vantage path diagram for AS25255

From SRB host (SOX, Belgrade)   openRFC 4890 ✓

filter likely at: (none) · min PMTU on path: 1500

4/4
Echo small (56B) 12.0ms
4/4
Echo 1500B (DF) 11.9ms
no
Type 1 dest-unreach
443,80
TCP responds on

Path (traceroute + mtr + PTR)

#IP / PTRRTTmtr lossASAS holder
12a09:ab81::10.2ms0%*AS60733PERKE-NET - ZORAN PEROVIC trading as Agencija Perke.NET, RS
2sox-pn.sox.rs
2001:7f8:1e:8::3a
0.2ms0%AS13004SOX - Serbian Open Exchange DOO, RS
32001:7f8:1e:8::3d0.5ms0%AS13004SOX - Serbian Open Exchange DOO, RS
42a02:2d8:0:a00e:232a12.9ms0%-
52001:7f8:30:0:2:1:2:5255 @VIX / AAIX / SAIX / TIROL-IX / ERA-IX13.6ms0%-NA
62001:470:0:2ec::212.3ms0%AS6939HURRICANE - Hurricane Electric LLC, US
7*-0%-
8*---
9*---
10*---
11*---
12*---
13*---
14*---
15*---
16*---
17*---
18*---

tracepath -6

 1?: [LOCALHOST]                        0.016ms pmtu 1500
 1:  _gateway                                              0.399ms 
 1:  _gateway                                              1.459ms 
 2:  sox-pn.sox.rs                                         0.663ms 
 3:  2001:7f8:1e:8::3d                                     0.675ms asymm  2 
 4:  ae8-930.RT.IRX.VIE.AT.retn.net                       11.343ms asymm  3 
 5:  2001:7f8:30:0:2:1:2:5255                             30.201ms asymm  3 
 6:  2001:470:0:2ec::2                                    14.174ms asymm  4 
 7:  no reply
 8:  no reply
 9:  no reply
10:  no reply
11:  no reply
12:  no reply
13:  no reply
14:  no reply
15:  no reply
16:  no reply
17:  no reply
18:  no reply
     Too many hops: pmtu 1500
     Resume: pmtu 1500 

From DE host (Berlin)   openRFC 4890 ✓

filter likely at: (none) · min PMTU on path: 1500

4/4
Echo small (56B) 17.1ms
4/4
Echo 1500B (DF) 17.1ms
no
Type 1 dest-unreach
443,80
TCP responds on

Path (traceroute + mtr + PTR)

#IP / PTRRTTmtr lossASAS holder
1xe-0-0-13-178.gw01.ber01.as59645.net
2a06:d1c1:100:b::1
0.2ms0%*AS59645WYBT-NET - Tobias Fiebig, DE
2ae0-2453.cr10.ber01.lwlcom.net
2a06:d1c0::dead:beef:1c02
0.5ms0%*AS59645WYBT-NET - Tobias Fiebig, DE
3ae0-40.cr10.muc02.lwlcom.net
2a00:c380:b200:230::178
11.2ms0%AS50629LWLCOM - LWLcom GmbH, DE
4ae0-10.cr10.muc01.lwlcom.net
2a00:c380:b200:230::177
11.4ms0%AS50629LWLCOM - LWLcom GmbH, DE
5*---
62001:470:0:2ec::226.1ms0%AS6939HURRICANE - Hurricane Electric LLC, US
7*-0%-
8*---
9*---
10*---
11*---
12*---
13*---
14*---
15*---
16*---
17*---
18*---

tracepath -6

 1?: [LOCALHOST]                        0.020ms pmtu 1500
 1:  xe-0-0-13-178.gw01.ber01.as59645.net                  0.434ms 
 1:  xe-0-0-13-178.gw01.ber01.as59645.net                  1.398ms 
 2:  ae0-2453.cr10.ber01.lwlcom.net                        1.137ms 
 3:  ae0-40.cr10.muc02.lwlcom.net                         11.625ms 
 4:  ae0-10.cr10.muc01.lwlcom.net                         11.751ms 
 5:  no reply
 6:  2001:470:0:2ec::2                                    18.023ms asymm  9 
 7:  no reply
 8:  no reply
 9:  no reply
10:  no reply
11:  no reply
12:  no reply
13:  no reply
14:  no reply
15:  no reply
16:  no reply
17:  no reply
18:  no reply
     Too many hops: pmtu 1500
     Resume: pmtu 1500 

From DE host (Düsseldorf)   openRFC 4890 ✓

filter likely at: (none) · min PMTU on path: 1500

4/4
Echo small (56B) 20.0ms
4/4
Echo 1500B (DF) 20.0ms
no
Type 1 dest-unreach
443,80
TCP responds on

Path (traceroute + mtr + PTR)

#IP / PTRRTTmtr lossASAS holder
1xe-0-0-12-142.gw01.dus01.as59645.net
2a06:d1c1:100:d::1
0.1ms0%*AS59645WYBT-NET - Tobias Fiebig, DE
2ae0-101.cr10.dus02.lwlcom.net
2a06:d1c0::dead:beef:1301
0.3ms0%*AS59645WYBT-NET - Tobias Fiebig, DE
3ae0-40.cr10.dus05.lwlcom.net
2a00:c380:b200:230::199
0.2ms0%AS50629LWLCOM - LWLcom GmbH, DE
4ae0-90.cr11.dus01.lwlcom.net
2a00:c380:b200:230::222
0.6ms0%AS50629LWLCOM - LWLcom GmbH, DE
5ae0-30.cr10.dus06.lwlcom.net
2a00:c380:b200:230::36
0.9ms0%AS50629LWLCOM - LWLcom GmbH, DE
6ae0-40.cr10.fra06.lwlcom.net
2a00:c380:b200:230::21
4.0ms0%AS50629LWLCOM - LWLcom GmbH, DE
7ae0-20.cr10.muc01.lwlcom.net
2a00:c380:b200:230::250
14.2ms0%AS50629LWLCOM - LWLcom GmbH, DE
8*---
92001:470:0:2ec::220.5ms0%AS6939HURRICANE - Hurricane Electric LLC, US
10*-0%-
11*---
12*---
13*---
14*---
15*---
16*---
17*---
18*---

tracepath -6

 1?: [LOCALHOST]                        0.017ms pmtu 1500
 1:  xe-0-0-12-142.gw01.dus01.as59645.net                  0.462ms 
 1:  xe-0-0-12-142.gw01.dus01.as59645.net                  0.237ms 
 2:  ae0-101.cr10.dus02.lwlcom.net                         0.421ms 
 3:  ae0-20.cr10.dus01.lwlcom.net                          0.781ms 
 4:  ae0-20.cr10.vel01.lwlcom.net                          1.106ms 
 5:  ae0-30.cr10.dus06.lwlcom.net                          1.176ms 
 6:  ae0-40.cr10.fra06.lwlcom.net                          4.099ms 
 7:  ae0-20.cr10.muc01.lwlcom.net                         14.955ms asymm  5 
 8:  no reply
 9:  2001:470:0:2ec::2                                    21.053ms asymm 10 
10:  no reply
11:  no reply
12:  no reply
13:  no reply
14:  no reply
15:  no reply
16:  no reply
17:  no reply
18:  no reply
     Too many hops: pmtu 1500
     Resume: pmtu 1500 

From NL host (go6lab)   openRFC 4890 ✓

filter likely at: (none) · min PMTU on path: 1500

4/4
Echo small (56B) 163.8ms
3/4
Echo 1500B (DF) 45.3ms
no
Type 1 dest-unreach
443,80
TCP responds on

Path (traceroute + mtr + PTR)

#IP / PTRRTTmtr lossASAS holder
12a00:8642:42::21.1ms0%AS203993GNA-DC1-AS - S.J.M. Steffann, NL
2*-0%*-
32a00:1ca8:1::1945.3ms0%AS50673Serverius-as - Serverius Holding B.V., NL
42a03:3f40::10:41119.7ms0%AS50673Serverius-as - Serverius Holding B.V., NL
52001:b28:3ff::1b1b:0:131.0ms90%AS31500GNM-AS - Global Network Management Inc, AG
6be9.core4.fra1.he.net
2001:470:e:e9::1
31.4ms90%AS6939HURRICANE - Hurricane Electric LLC, US
7be7.core3.ams1.he.net
2001:470:e:74::1
31.0ms-AS6939HURRICANE - Hurricane Electric LLC, US
8de-cix.r60.inx.fra.de.nextlayer.net
2001:7f8::6e4:0:1
41.2ms0%-NA
9ams-ix.r06.nikh.ams.nl.nextlayer.net
2001:7f8:1::a500:1764:1
51.1ms0%-NA
10ip6-ae2-0-r32.inx.vie.nextlayer.net
2a01:190:1764:800b::1
46.4ms0%AS1764NEXTLAYER-AS - Next Layer Telekommunikationsdienstleistungs- und Beratungs GmbH, AT
112001:470:0:2ec::242.1ms0%AS6939HURRICANE - Hurricane Electric LLC, US
122001:470:0:2ec::243.4ms0%AS6939HURRICANE - Hurricane Electric LLC, US
13*---
14*---
15*---
16*---
17*---
18*---

Rate-limited ICMPv6: hop 5, hop 6 (loss between 5% and 95% across mtr cycles - the router replies but only sometimes).

tracepath -6

 1?: [LOCALHOST]                        0.040ms pmtu 1500
 1:  2a00:8642:42::2                                       9.460ms 
 1:  2a00:8642:42::2                                       5.417ms 
 2:  gw.friends.steffann.nl                                5.228ms 
 3:  2a00:1ca8:1::194                                      4.728ms 
 4:  2a03:3f40::10:41                                      6.594ms 
 5:  2001:b28:3ff::1b1b:0:1                               29.741ms 
 6:  be2.core1.cph1.he.net                                31.228ms asymm  4 
 7:  no reply
 8:  no reply
 9:  ams-ix.r06.nikh.ams.nl.nextlayer.net                 44.513ms asymm  8 
10:  ip6-ae2-0-r32.inx.vie.nextlayer.net                  42.729ms asymm 11 
11:  2001:678:c1c:7ffd::2                                 45.682ms asymm 12 
12:  2001:470:0:2ec::2                                    43.326ms asymm 11 
13:  no reply
14:  no reply
15:  no reply
16:  no reply
17:  no reply
18:  no reply
     Too many hops: pmtu 1500
     Resume: pmtu 1500 

From ITA host (Karsolink)   openRFC 4890 ✓

filter likely at: (none) · min PMTU on path: 1500

4/4
Echo small (56B) 95.6ms
3/4
Echo 1500B (DF) 20.9ms
no
Type 1 dest-unreach
443,80
TCP responds on

Path (traceroute + mtr + PTR)

#IP / PTRRTTmtr lossASAS holder
1*---
2*---
3*-50%-
4*---
5be47.core1.mil2.he.net
2001:470:e:69::2
13.1ms0%AS6939HURRICANE - Hurricane Electric LLC, US
6be1.core1.zrh2.he.net
2001:470:e:dd::2
13.9ms0%AS6939HURRICANE - Hurricane Electric LLC, US
7*---
8be1.core3.zrh3.he.net
2001:470:0:7e0::2
14.6ms0%AS6939HURRICANE - Hurricane Electric LLC, US
9*---
10ip6-ae1-0-r32.inx.vie.nextlayer.net
2a01:190:1764:800c::1
20.7ms0%AS1764NEXTLAYER-AS - Next Layer Telekommunikationsdienstleistungs- und Beratungs GmbH, AT
11*---
122001:470:0:2ec::220.4ms0%AS6939HURRICANE - Hurricane Electric LLC, US
13*-0%-
14*---
15*---
16*---
17*---
18*---

Rate-limited ICMPv6: hop 3 (loss between 5% and 95% across mtr cycles - the router replies but only sometimes).

tracepath -6

 1?: [LOCALHOST]                        0.029ms pmtu 1500
 1:  no reply
 2:  2a12:d8c0:109f:121::a1                                0.514ms 
 3:  no reply
 4:  no reply
 5:  be47.core1.mil2.he.net                               11.426ms 
 6:  be1.core1.zrh2.he.net                                14.292ms 
 7:  no reply
 8:  be1.core3.zrh3.he.net                                15.675ms 
 9:  no reply
10:  ip6-ae2-0-r32.inx.vie.nextlayer.net                  20.319ms asymm 11 
11:  no reply
12:  2001:470:0:2ec::2                                    21.472ms asymm  7 
13:  no reply
14:  no reply
15:  no reply
16:  no reply
17:  no reply
18:  no reply
     Too many hops: pmtu 1500
     Resume: pmtu 1500 

From SLO host (6connect)   openRFC 4890 ✓

filter likely at: (none) · min PMTU on path: 1500

4/4
Echo small (56B) 8.9ms
4/4
Echo 1500B (DF) 9.3ms
no
Type 1 dest-unreach
443,80
TCP responds on

Path (traceroute + mtr + PTR)

#IP / PTRRTTmtr lossASAS holder
1fw1-lju.6connect.com
2607:fae0:a000::2
0.4ms0%*AS80386CONNECT - 6connect, Inc., US
2*---
3*-10%-
42a00:ee0:1:15::21.2ms0%AS5603SIOL-NET - Telekom Slovenije, d.d., SI
52a11:4142:20021.9ms0%-
6r2-vie1-at.as5405.net
2a11:4140::1e
8.2ms0%AS5405INTERDOTLINK - Inter.link GmbH, DE
7et9-4096.r2-vie2-at.as5405.net @VIX / AAIX / SAIX / TIROL-IX / ERA-IX
2001:7f8:30:0:3:1:2:5291
7.8ms0%-NA
82001:7f8:30:0:2:1:2:5255 @VIX / AAIX / SAIX / TIROL-IX / ERA-IX9.0ms0%-NA
92001:470:0:2ec::210.5ms0%AS6939HURRICANE - Hurricane Electric LLC, US
10*-0%-
11*---
12*---
13*---
14*---
15*---
16*---
17*---
18*---

Rate-limited ICMPv6: hop 3 (loss between 5% and 95% across mtr cycles - the router replies but only sometimes).

tracepath -6

 1?: [LOCALHOST]                        0.032ms pmtu 9000
 1:  fw1-lju.6connect.com                                  0.631ms 
 1:  fw1-lju.6connect.com                                  0.605ms 
 2:  no reply
 3:  no reply
 4:  2a00:ee0:1:15::2                                      1.582ms asymm  3 
 5:  2a00:ee0:1:10::2                                      1.690ms pmtu 1500
 5:  2a11:4142:2002::                                      1.257ms asymm  6 
 6:  r2-vie1-at.as5405.net                                 7.999ms asymm  8 
 7:  et9-4096.r2-vie2-at.as5405.net                        7.475ms asymm  8 
 8:  2001:7f8:30:0:2:1:2:5255                             11.248ms asymm  5 
 9:  2001:470:0:2ec::2                                     9.311ms asymm  5 
10:  no reply
11:  no reply
12:  no reply
13:  no reply
14:  no reply
15:  no reply
16:  no reply
17:  no reply
18:  no reply
     Too many hops: pmtu 1500

From SLO host (T-2)   openRFC 4890 ✓

filter likely at: (none) · min PMTU on path: 1500

4/4
Echo small (56B) 7.9ms
4/4
Echo 1500B (DF) 7.9ms
no
Type 1 dest-unreach
443,80
TCP responds on

Path (traceroute + mtr + PTR)

#IP / PTRRTTmtr lossASAS holder
1*---
22a01:260:1::22512.4ms0%*AS34779T-2-AS - T-2, d.o.o., SI
32a01-260-1-1--9a.core6.t-2.net
2a01:260:1:1::9a
2.2ms0%*AS34779T-2-AS - T-2, d.o.o., SI
42a01-260-1-1--25.core6.t-2.net
2a01:260:1:1::25
5.1ms0%*AS34779T-2-AS - T-2, d.o.o., SI
52001:7f8:30:0:2:1:2:5255 @VIX / AAIX / SAIX / TIROL-IX / ERA-IX8.9ms0%-NA
62001:470:0:2ec::217.4ms0%AS6939HURRICANE - Hurricane Electric LLC, US
72001:470:0:2ec::210.6ms0%AS6939HURRICANE - Hurricane Electric LLC, US
8*---
9*---
10*---
11*---
12*---
13*---
14*---
15*---
16*---
17*---
18*---

tracepath -6

 1?: [LOCALHOST]                        0.025ms pmtu 1500
 1:  no reply
 2:  2a01:260:1::225                                       8.018ms 
 3:  2a01-260-1-1--9c.core6.t-2.net                        3.188ms 
 4:  2a01-260-1-1--38.core6.t-2.net                        2.096ms asymm  3 
 5:  2001:7f8:30:0:2:1:2:5255                              8.726ms asymm  7 
 6:  2001:470:0:2ec::2                                     9.634ms 
 7:  2001:470:0:2ec::2                                    10.643ms asymm  6 
 8:  no reply
 9:  no reply
10:  no reply
11:  no reply
12:  no reply
13:  no reply
14:  no reply
15:  no reply
16:  no reply
17:  no reply
18:  no reply
     Too many hops: pmtu 1500
     Resume: pmtu 1500