AS199321 - INTESYS-AS Intesys Networking SrlPI/PARPKI -ASPA -

← back to summary

All countriesHomeState of IPv6TopologyIXPsAboutipv6.si ↗ Sparky
IPv6 prefix announced, but nothing inside is responding yet. AS199321 announces 1 IPv6 prefix(es) to the global routing table - that’s the part that BGP and our route-server scrape confirm. But our active discovery (curated hostnames, holder-derived domains, authoritative DNS NS/SOA/MX, certificate-transparency hostnames, RIPE Atlas, RDAP, IPv6 Hitlist) found no ICMPv6-responsive host inside the prefix on either vantage, and a yarrp pass against random addresses inside the prefix produced zero in-prefix hops (no router on the path through the AS replied with Time-Exceeded for any random target). That combination usually means the announcement is configured but the addresses inside aren’t in active use yet. The BGP route is there; the operational deployment is still ahead.

AS overview

Test target: 2a01:5f60::1 · (no live host found) · address space: mixed · prefixes announced: 1

prefix(es): 2a01:5f60::/32

MIX-IT / NAMEX / MINAP / TOP-IX / VSIX / EQUINIX-MILAN / BGPX-ROME / NAMEX-BARI / PCIX / DECIX-PALERMO peering

Not an MIX-IT / NAMEX / MINAP / TOP-IX / VSIX / EQUINIX-MILAN / BGPX-ROME / NAMEX-BARI / PCIX / DECIX-PALERMO member, but our traceroute path crosses the MIX-IT / NAMEX / MINAP / TOP-IX / VSIX / EQUINIX-MILAN / BGPX-ROME / NAMEX-BARI / PCIX / DECIX-PALERMO LAN from SLO host (6connect) - reached via an MIX-IT / NAMEX / MINAP / TOP-IX / VSIX / EQUINIX-MILAN / BGPX-ROME / NAMEX-BARI / PCIX / DECIX-PALERMO-resident transit operator.

RPKI & ASPA

0 of 1 prefix(es) covered by a valid ROA, 1 not-found.

PrefixRPKI stateReasonCovering VRP(s)
2a01:5f60::/32- not-foundno covering VRP

Random-IP probe (yarrp) into the AS' prefixes

We probed 15 arbitrary IPv6 address(es) inside AS199321's announced prefix(es). No router inside the prefix responded. The deepest visible hop was 2001:1900:5:2:2::5102 at hop 11 - that router answers ICMPv6 Echo. This is not in AS199321's announced prefix; operationally it's the AS-edge / peering interface (often on an IXP peering address or an upstream's /127 link). The traceroute boundary is the AS edge: ICMPv6 Time-Exceeded responses from anything inside this AS are filtered.

ICMPv6 Type 2 (Packet Too Big) acceptance - active test

Type 2 active test inconclusive: no Echo Reply to 1300-byte probe.
method: ICMPv6 Echo + forged PTB, tested 2026-05-25T12:30:09Z

Failure detail — what to grep in your logs
vantageour sourceyour targetmethodresulttested (UTC)
go6lab2a00:8642:42::752a01:5f60::1icmp6-echono_echo2026-05-25T12:30:09Z
karsolink2a12:d8c0:105a:9001::a1542a01:5f60::1icmp6-echono_echo2026-05-25T12:34:57Z
odin2607:fae0:a000::422a01:5f60::1icmp6-echono_echo2026-05-25T12:29:56Z

Attempt log (go6lab):

  1. icmp6-echo → no_echo: no Echo Reply to 1300-byte probe
  2. dns-tcp → no_tcp: connect failed: timed out
  3. tls → no_tcp: TLS connect failed
  4. http → no_tcp: tcp/80 not open

Attempt log (karsolink):

  1. icmp6-echo → no_echo: no Echo Reply to 1300-byte probe
  2. dns-tcp → no_tcp: connect failed: timed out
  3. tls → no_tcp: TLS connect failed
  4. http → no_tcp: tcp/80 not open

Attempt log (odin):

  1. icmp6-echo → no_echo: no Echo Reply to 1300-byte probe
  2. dns-tcp → no_tcp: connect failed: timed out
  3. tls → no_tcp: TLS connect failed
  4. http → no_tcp: tcp/80 not open

To match the corresponding ICMPv6 packet on your side (host firewall, AS edge, or transit tap), look for our PTBs around the timestamps above:

sudo tcpdump -i any -n -e 'icmp6 and ip6[40] = 2 and (src host 2607:fae0:a000::42 or src host 2a00:8642:42::75 or src host 2a12:d8c0:105a:9001::a154)'

If you see our PTBs arriving but the destination's TCP/Echo flow does not shrink, the drop is in the destination kernel (cause 3 below). If you don't see them at all, drop is upstream of you (cause 2). If you only see them from one of our two source IPs, the drop is path-asymmetric — one transit on the asymmetric route is filtering, the other is not.

From NL host (go6lab)   transit only unreachable

filter likely at: past AS20836 (CDLAN-AS) · min PMTU on path: 1500

0/4
Echo small (56B) -
0/4
Echo 1500B (DF) -
no
Type 1 dest-unreach
-
TCP responds on

Path (traceroute + mtr + PTR)

#IP / PTRRTTmtr lossASAS holder
12a00:8642:42::31.2ms0%AS203993STEFFANN-DC-AS - S.J.M. Steffann, NL
2gw.friends.steffann.nl
2a00:8642:1000:f000::1		1.8ms0%*AS203993STEFFANN-DC-AS - S.J.M. Steffann, NL
32a00:1ca8:1::1942.3ms0%AS50673Serverius-as - Serverius Holding B.V., NL
42a03:3f40::10:412.2ms0%AS50673Serverius-as - Serverius Holding B.V., NL
5ix-ge-100-0-0-66.qhar2.ad1-amsterdam.ipv6.as6453.net
2a01:3e0:30:1::1		4.3ms0%AS6453AS6453 - TATA COMMUNICATIONS (AMERICA) INC, US
6if-bundle-2-2.qcore1.ad1-amsterdam.ipv6.as6453.net
2a01:3e0:701::7		3.8ms0%AS6453AS6453 - TATA COMMUNICATIONS (AMERICA) INC, US
7if-bundle-51-2.qcore1.av2-amsterdam.ipv6.as6453.net
2a01:3e0:701::f		4.3ms70%AS6453AS6453 - TATA COMMUNICATIONS (AMERICA) INC, US
8*-30%-
9ae28.edge7.ams1.sp.lumen.tech
2001:1900:5:3::201		4.7ms0%AS3356LEVEL3 - Level 3 Parent, LLC, US
10lo0.0.edge1.Milan2.level3.net
2001:4c08::1b		21.7ms0%AS3356LEVEL3 - Level 3 Parent, LLC, US
112001:1900:5:2:2::510222.1ms0%AS3356LEVEL3 - Level 3 Parent, LLC, US
12*-80%-
13*-80%-
14*---
15*---
16*---
17*---
182001:b60:1:2::21265.7ms-AS20836CDLAN-AS - CDLAN SpA, IT

Rate-limited ICMPv6: hop 7, hop 8, hop 12, hop 13 (loss between 5% and 95% across mtr cycles - the router replies but only sometimes).

tracepath -6

 1?: [LOCALHOST]                        0.034ms pmtu 1500
 1:  2a00:8642:42::3                                       1.164ms 
 1:  2a00:8642:42::3                                       1.294ms 
 2:  gw.friends.steffann.nl                                2.152ms 
 3:  2a00:1ca8:1::194                                      3.219ms 
 4:  2a03:3f40::10:41                                      2.685ms 
 5:  ix-et-9-1-2.tcore1.ad1-amsterdam.ipv6.as6453.net      5.700ms 
 6:  if-bundle-2-2.qcore1.ad1-amsterdam.ipv6.as6453.net    3.541ms 
 7:  if-bundle-52-2.qcore2.av2-amsterdam.ipv6.as6453.net   3.704ms 
 8:  no reply
 9:  ae28.edge7.ams1.sp.lumen.tech                         6.294ms asymm  7 
10:  lo0.0.edge1.Milan2.level3.net                        23.362ms asymm 12 
11:  2001:1900:5:2:2::5102                                22.075ms asymm 10 
12:  no reply
13:  no reply
14:  no reply
15:  no reply
16:  no reply
16:  2001:b60:1:2::2                                     3131.961ms !H
     Resume: pmtu 1500

From ITA host (Karsolink)   transit only unreachable

filter likely at: past AS20836 (CDLAN-AS) · min PMTU on path: 1500

0/4
Echo small (56B) -
0/4
Echo 1500B (DF) -
no
Type 1 dest-unreach
-
TCP responds on

Path (traceroute + mtr + PTR)

#IP / PTRRTTmtr lossASAS holder
1*-0%*-
2*-0%*-
32a12:d8c0:101f:6::110.0ms0%AS204471KARSOLINK - 2S Computers SRL, IT
4cdlan.minap.it
2001:7f8:c5::a502:836:1		9.7ms0%AS20836CDLAN s.r.l.
52001:b60:0:a0119.6ms0%-
62001:b60:1:2::29.8ms-AS20836CDLAN-AS - CDLAN SpA, IT
7*---
8*-90%-
9*---
10*---
11*---
12*---
13*---
14*---
15*---
16*---
17*---
18*---
19*---
20*---
21*---
22*---
23*---
24*---

Rate-limited ICMPv6: hop 8 (loss between 5% and 95% across mtr cycles - the router replies but only sometimes).

tracepath -6

 1?: [LOCALHOST]                        0.031ms pmtu 1500
 1:  karsolink-01.net.karsolink.com                        0.895ms 
 1:  no reply
 2:  no reply
 3:  no reply
 4:  cdlan.minap.it                                       10.013ms asymm  5 
 5:  2001:b60:0:a011::                                     9.950ms asymm  4 
 6:  2001:b60:1:2::2                                      10.751ms asymm  5 
 7:  no reply
 7:  2001:b60:1:2::2                                     3253.337ms !H
     Resume: pmtu 1500

From SLO host (6connect)   transit only unreachable

filter likely at: past AS20836 (CDLAN-AS) · min PMTU on path: 1500

0/4
Echo small (56B) -
0/4
Echo 1500B (DF) -
no
Type 1 dest-unreach
-
TCP responds on

Path (traceroute + mtr + PTR)

#IP / PTRRTTmtr lossASAS holder
1fw1-lju.6connect.com
2607:fae0:a000::2		0.2ms0%*AS80386CONNECT - 6connect, Inc., US
2*---
32a03:a100:0:201:1::10.6ms0%AS56635XENYA - XENYA inzeniring, proizvodnja in trgovina, d.o.o. Ljubljana, SI
4e0-1.core1.lju1.he.net
2001:470:1:5be::1		2.0ms0%AS6939HURRICANE - Hurricane Electric LLC, US
5*---
6port-channel1.core1.zag2.he.net
2001:470:0:2ea::2		3.8ms0%AS6939HURRICANE - Hurricane Electric LLC, US
7*---
8cdlan-v6.mix-it.net @MIX-IT / NAMEX / MINAP / TOP-IX / VSIX / EQUINIX-MILAN / BGPX-ROME / NAMEX-BARI / PCIX / DECIX-PALERMO
2001:7f8:b:100:1d1:a5d2:836:16		10.2ms0%-NA
92001:b60:0:a01110.4ms0%-
10*-80%-
11*-80%-
12*---
13*---
14*---
152001:b60:1:2::21260.5ms-AS20836CDLAN-AS - CDLAN SpA, IT

Rate-limited ICMPv6: hop 10, hop 11 (loss between 5% and 95% across mtr cycles - the router replies but only sometimes).

tracepath -6

 1?: [LOCALHOST]                        0.025ms pmtu 1500
 1:  fw1-lju.6connect.com                                  0.765ms 
 1:  fw1-lju.6connect.com                                  0.418ms 
 2:  no reply
 3:  2a03:a100:0:201:1::1                                208.364ms 
 4:  e0-1.core1.lju1.he.net                                2.127ms 
 5:  no reply
 6:  port-channel1.core1.zag2.he.net                       4.350ms 
 7:  no reply
 8:  cdlan.minap.it                                       10.551ms asymm  7 
 9:  2001:b60:0:a011::                                    10.733ms asymm  6 
10:  no reply
11:  no reply
11:  2001:b60:1:2::2                                     3188.167ms !H
     Resume: pmtu 1500