AS overview
Test target: 2a13:8f82::1 · (no live host found) · address space: unknown · prefixes announced: 1
prefix(es): 2a13:8f82::/31
RPKI & ASPA
1 of 1 prefix(es) covered by a valid ROA.
| Prefix | RPKI state | Reason | Covering VRP(s) |
|---|---|---|---|
2a13:8f82::/31 | ✓ valid | matched VRP (correct origin, length within maxLength) | AS199699 /29 maxLen 31 (ripe) |
Random-IP probe (yarrp) into the AS' prefixes
We probed 15 arbitrary IPv6 address(es) inside AS199699's announced prefix(es). No router inside the prefix responded. The deepest visible hop was 2001:4b7e::1:132 at hop 23 - that router answers ICMPv6 Echo. This is not in AS199699's announced prefix; operationally it's the AS-edge / peering interface (often on an IXP peering address or an upstream's /127 link). The traceroute boundary is the AS edge: ICMPv6 Time-Exceeded responses from anything inside this AS are filtered.
ICMPv6 Type 2 (Packet Too Big) acceptance - active test
Type 2 active test inconclusive: no Echo Reply to 1300-byte probe.
method: ICMPv6 Echo + forged PTB, tested 2026-05-25T12:38:47Z
Failure detail — what to grep in your logs
| vantage | our source | your target | method | result | tested (UTC) |
|---|---|---|---|---|---|
| go6lab | 2a00:8642:42::75 | 2a13:8f82::1 | icmp6-echo | no_echo | 2026-05-25T12:38:47Z |
| karsolink | 2a12:d8c0:105a:9001::a154 | 2a13:8f82::1 | icmp6-echo | no_echo | 2026-05-25T12:51:09Z |
| odin | 2607:fae0:a000::42 | 2a13:8f82::1 | icmp6-echo | no_echo | 2026-05-25T12:38:15Z |
Attempt log (go6lab):
icmp6-echo→ no_echo: no Echo Reply to 1300-byte probedns-tcp→ no_tcp: connect failed: [Errno 13] Permission deniedtls→ no_tcp: TLS connect failedhttp→ no_tcp: tcp/80 not open
Attempt log (karsolink):
icmp6-echo→ no_echo: no Echo Reply to 1300-byte probedns-tcp→ no_tcp: connect failed: [Errno 13] Permission deniedtls→ no_tcp: TLS connect failedhttp→ no_tcp: tcp/80 not open
Attempt log (odin):
icmp6-echo→ no_echo: no Echo Reply to 1300-byte probedns-tcp→ no_tcp: connect failed: [Errno 13] Permission deniedtls→ no_tcp: TLS connect failedhttp→ no_tcp: tcp/80 not open
To match the corresponding ICMPv6 packet on your side (host firewall, AS edge, or transit tap), look for our PTBs around the timestamps above:
sudo tcpdump -i any -n -e 'icmp6 and ip6[40] = 2 and (src host 2607:fae0:a000::42 or src host 2a00:8642:42::75 or src host 2a12:d8c0:105a:9001::a154)'
If you see our PTBs arriving but the destination's TCP/Echo flow does not shrink, the drop is in the destination kernel (cause 3 below). If you don't see them at all, drop is upstream of you (cause 2). If you only see them from one of our two source IPs, the drop is path-asymmetric — one transit on the asymmetric route is filtering, the other is not.
From NL host (go6lab) transit only unreachable
filter likely at: past AS12637 (SEEWEB) · min PMTU on path: 1500
Path (traceroute + mtr + PTR)
| # | IP / PTR | RTT | mtr loss | AS | AS holder |
|---|---|---|---|---|---|
| 1 | 2a00:8642:42::3 | 1.0ms | 0% | AS203993 | STEFFANN-DC-AS - S.J.M. Steffann, NL |
| 2 | * | - | 0%* | - | |
| 3 | ccr2-ccr1.dc1.nogalliance.org 2a00:8642:dc1:2::b | 1.9ms | 0% | AS203993 | STEFFANN-DC-AS - S.J.M. Steffann, NL |
| 4 | ams-ix.mil.seeweb.it 2001:7f8:1::a501:2637:1 | 18.6ms | 0% | - | NA |
| 5 | ae0-3.spock.mil.seeweb.it 2001:4b7a:0:f000::1 | 19.5ms | 0% | AS12637 | SEEWEB - SEEWEB s.r.l., IT |
| 6 | ae1-47.picard.fro2.seeweb.it 2001:4b78:0:f003::2 | 32.3ms | 0% | AS12637 | SEEWEB - SEEWEB s.r.l., IT |
| 7 | ae0-3.kirk.fro2.seeweb.it 2001:4b7e:0:f000::1 | 28.8ms | 0% | AS12637 | SEEWEB - SEEWEB s.r.l., IT |
| 8 | 2001:4b7e::1:132 | 29.2ms | 0% | AS12637 | SEEWEB - SEEWEB s.r.l., IT |
| 9 | 2001:4b7e::1:132 | 30.4ms | 0% | AS12637 | SEEWEB - SEEWEB s.r.l., IT |
tracepath -6
1?: [LOCALHOST] 0.032ms pmtu 1500
1: 2a00:8642:42::3 1.824ms
1: 2a00:8642:42::3 1.614ms
2: gw.friends.steffann.nl 2.659ms
3: ccr2-ccr1.dc1.nogalliance.org 2.747ms asymm 2
4: ams-ix.mil.seeweb.it 20.111ms asymm 5
5: ae0-3.spock.mil.seeweb.it 19.644ms asymm 6
6: ae1-47.picard.fro2.seeweb.it 30.662ms asymm 7
7: ae0-3.kirk.fro2.seeweb.it 29.826ms asymm 6
8: 2001:4b7e::1:132 35.687ms asymm 7
9: 2001:4b7e::1:132 67.404ms !A
Resume: pmtu 1500 From ITA host (Karsolink) transit only unreachable
filter likely at: past AS12637 (SEEWEB) · min PMTU on path: 1500
Path (traceroute + mtr + PTR)
| # | IP / PTR | RTT | mtr loss | AS | AS holder |
|---|---|---|---|---|---|
| 1 | * | - | 0%* | - | |
| 2 | 2a12:d8c0:109f:121::a1 | 0.3ms | 0%* | AS204471 | KARSOLINK - 2S Computers SRL, IT |
| 3 | 2a12:d8c0:101f:6::1 | 10.1ms | 20% | AS204471 | KARSOLINK - 2S Computers SRL, IT |
| 4 | seeweb.minap.it 2001:7f8:c5::a501:2637:1 | 10.1ms | 0% | AS12637 | Seeweb s.r.l. |
| 5 | ae0-3.spock.mil.seeweb.it 2001:4b7a:0:f000::1 | 10.2ms | 0% | AS12637 | SEEWEB - SEEWEB s.r.l., IT |
| 6 | ae1-47.picard.fro2.seeweb.it 2001:4b78:0:f003::2 | 20.6ms | 0% | AS12637 | SEEWEB - SEEWEB s.r.l., IT |
| 7 | ae0-3.kirk.fro2.seeweb.it 2001:4b7e:0:f000::1 | 20.4ms | 0% | AS12637 | SEEWEB - SEEWEB s.r.l., IT |
| 8 | 2001:4b7e::1:132 | 20.4ms | 0% | AS12637 | SEEWEB - SEEWEB s.r.l., IT |
| 9 | 2001:4b7e::1:132 | 20.3ms | 0% | AS12637 | SEEWEB - SEEWEB s.r.l., IT |
Rate-limited ICMPv6: hop 3 (loss between 5% and 95% across mtr cycles - the router replies but only sometimes).
tracepath -6
1?: [LOCALHOST] 0.012ms pmtu 1500
1: no reply
2: 2a12:d8c0:109f:121::a1 1.100ms
3: 2a12:d8c0:101f:6::1 10.461ms
4: seeweb.minap.it 10.696ms
5: ae0-3.spock.mil.seeweb.it 10.634ms
6: ae1-47.picard.fro2.seeweb.it 21.181ms
7: 2001:4b7e:0:f000::1 20.971ms asymm 5
8: 2001:4b7e::1:132 21.063ms asymm 6
9: 2001:4b7e::1:132 21.349ms !A
Resume: pmtu 1500 From SLO host (6connect) transit only unreachable
filter likely at: past AS12637 (SEEWEB) · min PMTU on path: 1500
Path (traceroute + mtr + PTR)
| # | IP / PTR | RTT | mtr loss | AS | AS holder |
|---|---|---|---|---|---|
| 1 | fw1-lju.6connect.com 2607:fae0:a000::2 | 0.2ms | 0%* | AS8038 | 6CONNECT - 6connect, Inc., US |
| 2 | * | - | 0%* | - | |
| 3 | 2a03:a100:0:201:1::1 | 0.8ms | 30% | AS56635 | XENYA - XENYA inzeniring, proizvodnja in trgovina, d.o.o. Ljubljana, SI |
| 4 | e0-1.core1.lju1.he.net 2001:470:1:5be::1 | 2.0ms | 80% | AS6939 | HURRICANE - Hurricane Electric LLC, US |
| 5 | * | - | - | - | |
| 6 | port-channel1.core1.zag2.he.net 2001:470:0:2ea::2 | 3.8ms | 60% | AS6939 | HURRICANE - Hurricane Electric LLC, US |
| 7 | * | - | - | - | |
| 8 | seeweb.minap.it 2001:7f8:c5::a501:2637:1 | 12.5ms | 0% | AS12637 | Seeweb s.r.l. |
| 9 | ae1-47.picard.fro2.seeweb.it 2001:4b78:0:f003::2 | 22.4ms | 0% | AS12637 | SEEWEB - SEEWEB s.r.l., IT |
| 10 | ae1-47.picard.fro2.seeweb.it 2001:4b78:0:f003::2 | 23.7ms | 0% | AS12637 | SEEWEB - SEEWEB s.r.l., IT |
| 11 | 2001:4b7e::1:132 | 22.1ms | 0% | AS12637 | SEEWEB - SEEWEB s.r.l., IT |
| 12 | 2001:4b7e::1:132 | 22.1ms | 0% | AS12637 | SEEWEB - SEEWEB s.r.l., IT |
Rate-limited ICMPv6: hop 3, hop 4, hop 6 (loss between 5% and 95% across mtr cycles - the router replies but only sometimes).
tracepath -6
1?: [LOCALHOST] 0.026ms pmtu 1500
1: fw1-lju.6connect.com 0.621ms
1: fw1-lju.6connect.com 0.441ms
2: ccr-to-fw-ccr1-gw-lju.6connect.com 0.680ms
3: 2a03:a100:0:201:1::1 0.645ms
4: e0-1.core1.lju1.he.net 1.786ms
5: no reply
6: port-channel1.core1.zag2.he.net 4.324ms
7: no reply
8: seeweb-v6.mix-it.net 12.251ms asymm 9
9: ae0-3.spock.mil.seeweb.it 12.464ms
10: 2001:4b7e:0:f000::1 22.641ms
11: 2001:4b7e:0:f000::1 23.619ms asymm 10
12: 2001:4b7e::1:132 22.515ms asymm 11
13: 2001:4b7e::1:132 22.562ms !A
Resume: pmtu 1500