AS39409 SWG-MyRootPW Sebastian-Wilhelm Graf

AS overview

Test target: 2a10:9906::1 · static prefix probe · address space: mixed · prefixes announced: 6

prefix(es): 2a10:9906::/48, 2001:678:d58::/48, 2a10:9906:1002::/48, 2a10:9906:1001::/48, 2a10:9906:3050::/48, 2a10:9906:3020::/48

Targets & per-vantage-point probe results (1 target(s) across 7 vantage point(s))

Source codes (hover any badge for full description): CUR=curated · NS/SOA/MX=DNS records · SPF=SPF TXT · DRV=holder-derived (www, ns1, mail, gw, …) · ATL=RIPE Atlas · PDB=PeeringDB · WHOIS=RIPE whois · RDAP=RIPE RDAP · HIT=IPv6 Hitlist · RTR=in-prefix path hop (router) · PRB=static prefix probe · SYN=synthetic prefix::1 fallback

Target IP / hostname	Source	SRB host (SOX, Belgrade)					DE host (Berlin)					DE host (Düsseldorf)					NL host (go6lab)					ITA host (Karsolink)					SLO host (6connect)					SLO host (T-2)
Target IP / hostname	Source	ping	1500B	:80	:443	reached	ping	1500B	:80	:443	reached	ping	1500B	:80	:443	reached	ping	1500B	:80	:443	reached	ping	1500B	:80	:443	reached	ping	1500B	:80	:443	reached	ping	1500B	:80	:443	reached
`2a10:9906::1`	prb	✓	✓	refused	refused	✓	✓	✓	refused	refused	✓	✓	✓	refused	refused	✓	✓	✓	?	?	✓	✓	✓	refused	refused	✓	✓	✓	refused	refused	✓	✓	✓	refused	refused	✓

VIX / AAIX / SAIX / TIROL-IX / ERA-IX peering

Not an VIX / AAIX / SAIX / TIROL-IX / ERA-IX member, but our traceroute path crosses the VIX / AAIX / SAIX / TIROL-IX / ERA-IX LAN from SRB host (SOX, Belgrade) - reached via an VIX / AAIX / SAIX / TIROL-IX / ERA-IX-resident transit operator.

RPKI & ASPA

6 of 6 prefix(es) covered by a valid ROA.

Prefix	RPKI state	Reason	Covering VRP(s)
`2a10:9906::/48`	✓ valid	matched VRP (correct origin, length within maxLength)	AS39409 /48 maxLen 48 (ripe)
`2001:678:d58::/48`	✓ valid	matched VRP (correct origin, length within maxLength)	AS39409 /48 maxLen 48 (ripe)
`2a10:9906:1002::/48`	✓ valid	matched VRP (correct origin, length within maxLength)	AS39409 /48 maxLen 48 (ripe)
`2a10:9906:1001::/48`	✓ valid	matched VRP (correct origin, length within maxLength)	AS39409 /48 maxLen 48 (ripe)
`2a10:9906:3050::/48`	✓ valid	matched VRP (correct origin, length within maxLength)	AS39409 /48 maxLen 48 (ripe)
`2a10:9906:3020::/48`	✓ valid	matched VRP (correct origin, length within maxLength)	AS39409 /48 maxLen 48 (ripe)

Random-IP probe (yarrp) into the AS' prefixes

We probed 70 arbitrary IPv6 address(es) inside AS39409's announced prefix(es). No router inside the prefix responded. The deepest visible hop was 2a01:190:1700:111::3 at hop 12 - that router answers ICMPv6 Echo. This is not in AS39409's announced prefix; operationally it's the AS-edge / peering interface (often on an IXP peering address or an upstream's /127 link). The traceroute boundary is the AS edge: ICMPv6 Time-Exceeded responses from anything inside this AS are filtered.

ICMPv6 Type 2 (Packet Too Big) acceptance - active test

Type 2 honored. Forged ICMPv6 PTB (MTU=1280) was accepted by the destination's stack: the next 1500-byte Echo Reply arrived split into 2 fragments via the IPv6 Fragment Header.
method: ICMPv6 Echo + forged PTB, tested 2026-09-22T13:57:57Z

Multi-vantage path map

Every hop of all vantages’ traceroutes toward the target, drawn left→right, grouped into per-AS bubbles (a hop seen from several vantages is one shared bubble, so converging paths merge). It answers two questions per vantage — shown on each source bubble as echo ✓/⚠/✗ · trace ✓/✗: did the destination reply to ICMPv6 Echo (✓ honored, ⚠ replied but PTB not honored, ✗ no reply), and did the traceroute reach it. A line to the target is drawn only when that vantage got an echo reply — solid if the PTB was honored, dashed if not (reachable but a broken-PMTUD / RFC 4890 violation). The path depth still shows how far the traceroute itself got, and runs of unanswered (* *) hops collapse into one dashed “silent” bubble. Open full size ↗

● SRB host (SOX, Belgrade)
● DE host (Berlin)
● DE host (Düsseldorf)
● NL host (go6lab)
● ITA host (Karsolink)
● SLO host (6connect)
● SLO host (T-2)
── solid line = echo reply, PTB honored (clean reach)
— — dashed line = echo reply but PTB not honored (RFC 4890 violation)
no line = no echo reply (never reached)
◉ target: green = clean, amber = reachable-but-violation / unreachable
⚠ suspected drop AS
⋯ silent (unanswered) hops
● IXP hop

From SRB host (SOX, Belgrade) openRFC 4890 ✓

filter likely at: (none) · min PMTU on path: 1500

4/4

Echo small (56B) 11.5ms

4/4

Echo 1500B (DF) 11.5ms

yes

Type 1 dest-unreach

443,80

TCP responds on

Path (traceroute + mtr + PTR)

#	IP / PTR	RTT	mtr loss	AS	AS holder
1	2a09:ab81::1	0.2ms	0%*	AS60733	PERKE-NET - ZORAN PEROVIC trading as Agencija Perke.NET, RS
2	sox-pn.sox.rs 2001:7f8:1e:8::3a	0.2ms	0%	AS13004	SOX - Serbian Open Exchange DOO, RS
3	2001:7f8:1e:8::3d	0.4ms	0%	AS13004	SOX - Serbian Open Exchange DOO, RS
4	2a02:2d8:0:a00e:232a	11.2ms	10%	-
5	vix-ip6-et-0-1-2-0-r60.inx.vie.at.nextlayer.net @VIX / AAIX / SAIX / TIROL-IX / ERA-IX 2001:7f8:30:0:2:1:0:1764	12.7ms	0%	-	NA
6	ip6-ae2-0-r15.esh.vie.nextlayer.net 2a01:190:1764:9c::2	26.7ms	0%	AS1764	NEXTLAYER-AS - Next Layer Telekommunikationsdienstleistungs- und Beratungs GmbH, AT
7	ipv6-vie.services.sebastian-graf.at 2a10:9906::1	13.1ms	0%	AS39409	SWG-MyRootPW - Sebastian-Wilhelm Graf, AT

Rate-limited ICMPv6: hop 4 (loss between 5% and 95% across mtr cycles - the router replies but only sometimes).

tracepath -6

 1?: [LOCALHOST]                        0.014ms pmtu 1500
 1:  _gateway                                              0.950ms 
 1:  _gateway                                              1.171ms 
 2:  sox-pn.sox.rs                                         2.447ms 
 3:  2001:7f8:1e:8::3d                                     1.148ms asymm  2 
 4:  ae8-930.RT.IRX.VIE.AT.retn.net                       12.899ms asymm  3 
 5:  vix-ip6-et-0-1-2-0-r60.inx.vie.at.nextlayer.net      30.670ms asymm  3 
 6:  no reply
 7:  ipv6-vie.services.sebastian-graf.at                  13.021ms reached
     Resume: pmtu 1500 hops 7 back 7

From DE host (Berlin) openRFC 4890 ✓

filter likely at: (none) · min PMTU on path: 1500

4/4

Echo small (56B) 22.8ms

4/4

Echo 1500B (DF) 22.8ms

yes

Type 1 dest-unreach

443,80

TCP responds on

Path (traceroute + mtr + PTR)

#	IP / PTR	RTT	mtr loss	AS	AS holder
1	*	-	0%*	-
2	ae0-2453.cr10.ber01.lwlcom.net 2a06:d1c0::dead:beef:1c02	0.7ms	0%*	AS59645	WYBT-NET - Tobias Fiebig, DE
3	ae0-150.cr10.fra01.lwlcom.net 2a00:c380:b200:230::174	10.0ms	0%	AS50629	LWLCOM - LWLcom GmbH, DE
4	ae0-100.cr10.fra02.lwlcom.net 2a00:c380:b200:230::215	10.1ms	0%	AS50629	LWLCOM - LWLcom GmbH, DE
5	ae0-10.cr10.fra06.lwlcom.net 2a00:c380:b200:230::236	9.8ms	0%	AS50629	LWLCOM - LWLcom GmbH, DE
6	nextlayer.peering.cz 2001:7f8:7f::c:31	19.1ms	0%	-	NA
7	ip6-ae2-0-r15.esh.vie.nextlayer.net 2a01:190:1764:9c::2	129.7ms	0%	AS1764	NEXTLAYER-AS - Next Layer Telekommunikationsdienstleistungs- und Beratungs GmbH, AT
8	ipv6-vie.services.sebastian-graf.at 2a10:9906::1	22.7ms	0%	AS39409	SWG-MyRootPW - Sebastian-Wilhelm Graf, AT

tracepath -6

 1?: [LOCALHOST]                        0.029ms pmtu 1500
 1:  xe-0-0-13-178.gw01.ber01.as59645.net                  0.647ms 
 1:  xe-0-0-13-178.gw01.ber01.as59645.net                  0.428ms 
 2:  ae0-2453.cr10.ber01.lwlcom.net                        1.000ms 
 3:  ae0-150.cr10.fra01.lwlcom.net                        10.516ms asymm  7 
 4:  ae0-100.cr10.fra02.lwlcom.net                        10.790ms asymm  8 
 5:  ae0-10.cr10.fra06.lwlcom.net                         10.482ms asymm  7 
 6:  nextlayer.peering.cz                                 18.904ms asymm  8 
 7:  no reply
 8:  ipv6-vie.services.sebastian-graf.at                  21.856ms reached
     Resume: pmtu 1500 hops 8 back 13

From DE host (Düsseldorf) openRFC 4890 ✓

filter likely at: (none) · min PMTU on path: 1500

4/4

Echo small (56B) 15.3ms

4/4

Echo 1500B (DF) 15.2ms

yes

Type 1 dest-unreach

443,80

TCP responds on

Path (traceroute + mtr + PTR)

#	IP / PTR	RTT	mtr loss	AS	AS holder
1	xe-0-0-12-142.gw01.dus01.as59645.net 2a06:d1c1:100:d::1	0.1ms	0%*	AS59645	WYBT-NET - Tobias Fiebig, DE
2	ae0-101.cr10.dus02.lwlcom.net 2a06:d1c0::dead:beef:1301	0.3ms	0%*	AS59645	WYBT-NET - Tobias Fiebig, DE
3	ae0-40.cr10.dus05.lwlcom.net 2a00:c380:b200:230::199	0.4ms	0%	AS50629	LWLCOM - LWLcom GmbH, DE
4	ae0-20.cr10.vel01.lwlcom.net 2a00:c380:b200:230::65	0.9ms	0%	AS50629	LWLCOM - LWLcom GmbH, DE
5	ae0-30.cr10.dus06.lwlcom.net 2a00:c380:b200:230::36	1.1ms	0%	AS50629	LWLCOM - LWLcom GmbH, DE
6	ae0-40.cr10.fra06.lwlcom.net 2a00:c380:b200:230::21	4.2ms	0%	AS50629	LWLCOM - LWLcom GmbH, DE
7	nextlayer.peering.cz 2001:7f8:7f::c:31	10.9ms	0%	-	NA
8	ip6-ae1-0-r15.esh.vie.nextlayer.net 2a01:190:1764:95::2	40.0ms	0%	AS1764	NEXTLAYER-AS - Next Layer Telekommunikationsdienstleistungs- und Beratungs GmbH, AT
9	ipv6-vie.services.sebastian-graf.at 2a10:9906::1	15.9ms	0%	AS39409	SWG-MyRootPW - Sebastian-Wilhelm Graf, AT

tracepath -6

 1?: [LOCALHOST]                        0.031ms pmtu 1500
 1:  xe-0-0-12-142.gw01.dus01.as59645.net                  0.731ms 
 1:  xe-0-0-12-142.gw01.dus01.as59645.net                  2.180ms 
 2:  ae0-101.cr10.dus02.lwlcom.net                         0.596ms 
 3:  ae0-40.cr10.dus05.lwlcom.net                          0.759ms 
 4:  ae0-20.cr10.vel01.lwlcom.net                          1.363ms 
 5:  ae0-30.cr10.dus06.lwlcom.net                          1.439ms 
 6:  ae0-40.cr10.fra06.lwlcom.net                          4.605ms 
 7:  nextlayer.peering.cz                                 11.161ms 
 8:  no reply
 9:  ipv6-vie.services.sebastian-graf.at                  17.085ms reached
     Resume: pmtu 1500 hops 9 back 12

From NL host (go6lab) openRFC 4890 ✓

filter likely at: (none) · min PMTU on path: 1500

4/4

Echo small (56B) 38.7ms

4/4

Echo 1500B (DF) 39.6ms

yes

Type 1 dest-unreach

TCP responds on

Path (traceroute + mtr + PTR)

#	IP / PTR	RTT	mtr loss	AS	AS holder
1	2a00:8642:42::2	2.0ms	0%	AS203993	GNA-DC1-AS - S.J.M. Steffann, NL
2	*	-	-	-
3	2a00:1ca8:1::194	5.4ms	0%	AS50673	Serverius-as - Serverius Holding B.V., NL
4	2a03:3f40::10:41	712.1ms	0%	AS50673	Serverius-as - Serverius Holding B.V., NL
5	2001:b28:3ff::1b1b:0:1	29.2ms	0%	AS31500	GNM-AS - Global Network Management Inc, AG
6	be9.core4.fra1.he.net 2001:470:e:e9::1	32.0ms	20%	AS6939	HURRICANE - Hurricane Electric LLC, US
7	*	-	-	-
8	*	-	0%	-
9	ip6-ae2-0-r15.esh.vie.nextlayer.net 2a01:190:1764:9c::2	64.1ms	0%	AS1764	NEXTLAYER-AS - Next Layer Telekommunikationsdienstleistungs- und Beratungs GmbH, AT
10	ipv6-vie.services.sebastian-graf.at 2a10:9906::1	45.5ms	0%	AS39409	SWG-MyRootPW - Sebastian-Wilhelm Graf, AT

Rate-limited ICMPv6: hop 6 (loss between 5% and 95% across mtr cycles - the router replies but only sometimes).

tracepath -6

 1?: [LOCALHOST]                        0.056ms pmtu 1500
 1:  2a00:8642:42::2                                       1.793ms 
 1:  2a00:8642:42::2                                       3.423ms 
 2:  no reply
 3:  2a00:1ca8:1::194                                    179.964ms 
 4:  2a03:3f40::10:41                                      4.709ms 
 5:  2001:b28:3ff::1b1b:0:1                               44.452ms 
 6:  be2.core1.cph1.he.net                                28.980ms asymm  4 
 7:  be7.core3.ams1.he.net                                29.170ms asymm  3 
 8:  de-cix.r60.inx.fra.de.nextlayer.net                  39.576ms 
 9:  ams-ix.r06.nikh.ams.nl.nextlayer.net                 43.736ms asymm  8 
10:  ipv6-vie.services.sebastian-graf.at                  41.698ms reached
     Resume: pmtu 1500 hops 10 back 11

From ITA host (Karsolink) openRFC 4890 ✓

filter likely at: (none) · min PMTU on path: 1500

4/4

Echo small (56B) 17.2ms

3/4

Echo 1500B (DF) 17.4ms

yes

Type 1 dest-unreach

443,80

TCP responds on

Path (traceroute + mtr + PTR)

#	IP / PTR	RTT	mtr loss	AS	AS holder
1	*	-	-	-
2	*	-	0%*	-
3	*	-	-	-
4	*	-	-	-
5	be47.core1.mil2.he.net 2001:470:e:69::2	10.7ms	0%	AS6939	HURRICANE - Hurricane Electric LLC, US
6	be1.core1.zrh2.he.net 2001:470:e:dd::2	13.9ms	0%	AS6939	HURRICANE - Hurricane Electric LLC, US
7	*	-	-	-
8	be1.core3.zrh3.he.net 2001:470:0:7e0::2	15.1ms	0%	AS6939	HURRICANE - Hurricane Electric LLC, US
9	*	-	-	-
10	ip6-ae1-0-r15.esh.vie.nextlayer.net 2a01:190:1764:95::2	30.8ms	0%	AS1764	NEXTLAYER-AS - Next Layer Telekommunikationsdienstleistungs- und Beratungs GmbH, AT
11	ipv6-vie.services.sebastian-graf.at 2a10:9906::1	17.9ms	0%	AS39409	SWG-MyRootPW - Sebastian-Wilhelm Graf, AT

tracepath -6

 1?: [LOCALHOST]                        0.028ms pmtu 1500
 1:  karsolink-01.net.karsolink.com                        0.912ms 
 1:  karsolink-01.net.karsolink.com                        1.452ms 
 2:  2a12:d8c0:109f:121::a1                                1.021ms 
 3:  2a12:d8c0:101f:6::1                                  10.310ms 
 4:  no reply
 5:  be47.core1.mil2.he.net                               13.443ms 
 6:  be1.core1.zrh2.he.net                                68.372ms 
 7:  no reply
 8:  be1.core3.zrh3.he.net                                15.468ms 
 9:  no reply
10:  no reply
11:  ipv6-vie.services.sebastian-graf.at                  18.324ms reached
     Resume: pmtu 1500 hops 11 back 11

From SLO host (6connect) openRFC 4890 ✓

filter likely at: (none) · min PMTU on path: 1500

4/4

Echo small (56B) 15.8ms

4/4

Echo 1500B (DF) 15.8ms

yes

Type 1 dest-unreach

443,80

TCP responds on

Path (traceroute + mtr + PTR)

#	IP / PTR	RTT	mtr loss	AS	AS holder
1	fw1-lju.6connect.com 2607:fae0:a000::2	0.4ms	0%*	AS8038	6CONNECT - 6connect, Inc., US
2	*	-	-	-
3	*	-	60%	-
4	2a00:ee0:1:10::2	1.0ms	0%	AS5603	SIOL-NET - Telekom Slovenije, d.d., SI
5	de-cix.r60.inx.fra.de.nextlayer.net 2001:7f8::6e4:0:1	14.9ms	0%	-	NA
6	ip6-ae1-0-r15.esh.vie.nextlayer.net 2a01:190:1764:95::2	32.2ms	0%	AS1764	NEXTLAYER-AS - Next Layer Telekommunikationsdienstleistungs- und Beratungs GmbH, AT
7	ipv6-vie.services.sebastian-graf.at 2a10:9906::1	16.0ms	0%	AS39409	SWG-MyRootPW - Sebastian-Wilhelm Graf, AT

Rate-limited ICMPv6: hop 3 (loss between 5% and 95% across mtr cycles - the router replies but only sometimes).

tracepath -6

 1?: [LOCALHOST]                        0.026ms pmtu 9000
 1:  fw1-lju.6connect.com                                  0.672ms 
 1:  fw1-lju.6connect.com                                  0.582ms 
 2:  no reply
 3:  no reply
 4:  2a00:ee0:1:10::2                                      2.136ms asymm  3 
 5:  2a00:ee0:1:10::2                                      1.799ms pmtu 1500
 5:  de-cix.r60.inx.fra.de.nextlayer.net                  24.817ms asymm  6 
 6:  no reply
 7:  ipv6-vie.services.sebastian-graf.at                  15.968ms reached
     Resume: pmtu 1500 hops 7 back 9

From SLO host (T-2) openRFC 4890 ✓

filter likely at: (none) · min PMTU on path: 1500

4/4

Echo small (56B) 9.0ms

4/4

Echo 1500B (DF) 9.9ms

yes

Type 1 dest-unreach

443,80

TCP responds on

Path (traceroute + mtr + PTR)

#	IP / PTR	RTT	mtr loss	AS	AS holder
1	*	-	-	-
2	*	-	0%*	-
3	*	-	0%*	-
4	*	-	0%*	-
5	*	-	-	-
6	*	-	30%	-
7	*	-	0%	-
8	*	-	0%	-
9	ipv6-vie.services.sebastian-graf.at 2a10:9906::1	9.1ms	0%	AS39409	SWG-MyRootPW - Sebastian-Wilhelm Graf, AT

Rate-limited ICMPv6: hop 6 (loss between 5% and 95% across mtr cycles - the router replies but only sometimes).

tracepath -6

 1?: [LOCALHOST]                        0.029ms pmtu 1500
 1:  no reply
 2:  2a01:260:1::225                                       6.638ms 
 3:  2a01-260-1-1--9c.core6.t-2.net                        2.681ms 
 4:  no reply
 5:  100ge0-0-0-31.core1.vie1.he.net                      12.775ms 
 6:  100ge0-0-0-31.core1.vie1.he.net                      13.017ms asymm  5 
 7:  vix-ip6-et-0-1-2-0-r60.esh.vie.at.nextlayer.net       9.944ms asymm  5 
 8:  ???                                                  10.072ms reached
     Resume: pmtu 1500 hops 8 back 9