AS overview
Test target: 2a13:a5c7:2401::1 · (no live host found) · address space: unknown · prefixes announced: 1
prefix(es): 2a13:a5c7:2401::/48
RPKI & ASPA
1 of 1 prefix(es) covered by a valid ROA.
| Prefix | RPKI state | Reason | Covering VRP(s) |
|---|---|---|---|
2a13:a5c7:2401::/48 | ✓ valid | matched VRP (correct origin, length within maxLength) | AS214050 /40 maxLen 48 (ripe) |
Random-IP probe (yarrp) into the AS' prefixes
We probed 15 arbitrary IPv6 address(es) inside AS214050's announced prefix(es). No router inside the prefix responded. The deepest visible hop was 2a03:d9c0:2000::265 at hop 24 - that router answers ICMPv6 Echo. This is not in AS214050's announced prefix; operationally it's the AS-edge / peering interface (often on an IXP peering address or an upstream's /127 link). The traceroute boundary is the AS edge: ICMPv6 Time-Exceeded responses from anything inside this AS are filtered.
ICMPv6 Type 2 (Packet Too Big) acceptance - active test
Type 2 active test inconclusive: no Echo Reply to 1300-byte probe.
method: ICMPv6 Echo + forged PTB, tested 2026-05-25T12:38:52Z
Failure detail — what to grep in your logs
| vantage | our source | your target | method | result | tested (UTC) |
|---|---|---|---|---|---|
| go6lab | 2a00:8642:42::75 | 2a13:a5c7:2401::1 | icmp6-echo | no_echo | 2026-05-25T12:38:52Z |
| karsolink | 2a12:d8c0:105a:9001::a154 | 2a13:a5c7:2401::1 | icmp6-echo | no_echo | 2026-05-25T12:51:13Z |
| odin | 2607:fae0:a000::42 | 2a13:a5c7:2401::1 | icmp6-echo | no_echo | 2026-05-25T12:38:21Z |
Attempt log (go6lab):
icmp6-echo→ no_echo: no Echo Reply to 1300-byte probedns-tcp→ no_tcp: connect failed: [Errno 101] Network is unreachabletls→ no_tcp: TLS connect failedhttp→ no_tcp: tcp/80 not open
Attempt log (karsolink):
icmp6-echo→ no_echo: no Echo Reply to 1300-byte probedns-tcp→ no_tcp: connect failed: [Errno 101] Network is unreachabletls→ no_tcp: TLS connect failedhttp→ no_tcp: tcp/80 not open
Attempt log (odin):
icmp6-echo→ no_echo: no Echo Reply to 1300-byte probedns-tcp→ no_tcp: connect failed: [Errno 101] Network is unreachabletls→ no_tcp: TLS connect failedhttp→ no_tcp: tcp/80 not open
To match the corresponding ICMPv6 packet on your side (host firewall, AS edge, or transit tap), look for our PTBs around the timestamps above:
sudo tcpdump -i any -n -e 'icmp6 and ip6[40] = 2 and (src host 2607:fae0:a000::42 or src host 2a00:8642:42::75 or src host 2a12:d8c0:105a:9001::a154)'
If you see our PTBs arriving but the destination's TCP/Echo flow does not shrink, the drop is in the destination kernel (cause 3 below). If you don't see them at all, drop is upstream of you (cause 2). If you only see them from one of our two source IPs, the drop is path-asymmetric — one transit on the asymmetric route is filtering, the other is not.
From NL host (go6lab) transit only unreachable
filter likely at: past AS3214 (XTOM) · min PMTU on path: 1500
Path (traceroute + mtr + PTR)
| # | IP / PTR | RTT | mtr loss | AS | AS holder |
|---|---|---|---|---|---|
| 1 | 2a00:8642:42::3 | 1.6ms | 0% | AS203993 | STEFFANN-DC-AS - S.J.M. Steffann, NL |
| 2 | * | - | 0%* | - | |
| 3 | 2a00:1ca8:1::194 | 2.7ms | 0% | AS50673 | Serverius-as - Serverius Holding B.V., NL |
| 4 | 2a03:3f40::10:41 | 2.9ms | 0% | AS50673 | Serverius-as - Serverius Holding B.V., NL |
| 5 | 2001:b28:3ff::1b1b:0:1 | 27.5ms | 0% | AS31500 | GNM-AS - Global Network Management Inc, AG |
| 6 | * | - | - | - | |
| 7 | e0-35.core2.dus1.he.net 2001:470:0:371::2 | 28.5ms | 0% | AS6939 | HURRICANE - Hurricane Electric LLC, US |
| 8 | ecix-dus.xtom.de 2001:7f8:8::c8e:0:1 | 28.5ms | 0% | - | NA |
| 9 | * | - | - | - | |
| 10 | s40230.vps.hosting 2a03:d9c0:2000::265 | 28.9ms | 0% | AS3214 | XTOM - xTom GmbH, DE |
tracepath -6
1?: [LOCALHOST] 0.035ms pmtu 1500
1: 2a00:8642:42::3 1.818ms
1: 2a00:8642:42::3 1.652ms
2: gw.friends.steffann.nl 2.625ms
3: 2a00:1ca8:1::194 3.150ms
4: 2a03:3f40::10:41 2.738ms
5: 2001:b28:3ff::1b1b:0:1 28.668ms asymm 6
6: no reply
7: e0-35.core2.dus1.he.net 28.785ms asymm 5
8: ecix-dus.xtom.de 28.577ms asymm 6
9: no reply
10: s40230.vps.hosting 28.826ms !N
Resume: pmtu 1500 From ITA host (Karsolink) transit only unreachable
filter likely at: past AS3214 (XTOM) · min PMTU on path: 1500
Path (traceroute + mtr + PTR)
| # | IP / PTR | RTT | mtr loss | AS | AS holder |
|---|---|---|---|---|---|
| 1 | karsolink-01.net.karsolink.com 2a12:d8c0:105a:9001::1 | 0.3ms | 0%* | AS204471 | KARSOLINK - 2S Computers SRL, IT |
| 2 | 2a12:d8c0:109f:121::a1 | 0.4ms | 0%* | AS204471 | KARSOLINK - 2S Computers SRL, IT |
| 3 | 2a12:d8c0:101f:6::1 | 10.2ms | 20% | AS204471 | KARSOLINK - 2S Computers SRL, IT |
| 4 | * | - | - | - | |
| 5 | * | - | - | - | |
| 6 | * | - | - | - | |
| 7 | e0-36.core2.dus1.he.net 2001:470:0:52e::2 | 23.3ms | 0% | AS6939 | HURRICANE - Hurricane Electric LLC, US |
| 8 | ecix-dus.xtom.de 2001:7f8:8::c8e:0:1 | 23.8ms | 0% | - | NA |
| 9 | * | - | - | - | |
| 10 | s40230.vps.hosting 2a03:d9c0:2000::265 | 23.9ms | 0% | AS3214 | XTOM - xTom GmbH, DE |
Rate-limited ICMPv6: hop 3 (loss between 5% and 95% across mtr cycles - the router replies but only sometimes).
tracepath -6
1?: [LOCALHOST] 0.029ms pmtu 1500
1: karsolink-01.net.karsolink.com 0.538ms
1: karsolink-01.net.karsolink.com 0.970ms
2: 2a12:d8c0:109f:121::a1 0.935ms
3: 2a12:d8c0:101f:6::1 10.459ms
4: no reply
5: no reply
6: no reply
7: e0-36.core2.dus1.he.net 30.912ms
8: ecix-dus.xtom.de 24.138ms
9: no reply
10: s40230.vps.hosting 24.265ms !N
Resume: pmtu 1500 From SLO host (6connect) transit only unreachable
filter likely at: past AS3214 (XTOM) · min PMTU on path: 1500
Path (traceroute + mtr + PTR)
| # | IP / PTR | RTT | mtr loss | AS | AS holder |
|---|---|---|---|---|---|
| 1 | fw1-lju.6connect.com 2607:fae0:a000::2 | 0.2ms | 0%* | AS8038 | 6CONNECT - 6connect, Inc., US |
| 2 | * | - | - | - | |
| 3 | 2a00:ee1:800:9::1 | 2.1ms | 0% | AS5603 | SIOL-NET - Telekom Slovenije, d.d., SI |
| 4 | 2a00:ee0:1:10::2 | 1.1ms | 0% | AS5603 | SIOL-NET - Telekom Slovenije, d.d., SI |
| 5 | 2a11:4142:2002 | 1.0ms | 0% | - | |
| 6 | r2-vie1-at.as5405.net 2a11:4140::1e | 12.6ms | 0% | AS5405 | INTERDOTLINK - Inter.link GmbH, DE |
| 7 | r2-vie2-at.as5405.net 2a11:4140::20 | 12.8ms | 0% | AS5405 | INTERDOTLINK - Inter.link GmbH, DE |
| 8 | r1-vie2-at.as5405.net 2a11:4140::1f | 12.7ms | 0% | AS5405 | INTERDOTLINK - Inter.link GmbH, DE |
| 9 | r1-muc1-de.as5405.net 2a11:4140::1c | 12.7ms | 0% | AS5405 | INTERDOTLINK - Inter.link GmbH, DE |
| 10 | 2001:7f8:44::151d:0:1 | 12.6ms | 0% | - | NA |
| 11 | decix.muc.v.ps 2001:7f8:44:0:3:3469:0:1 | 21.3ms | 0% | - | NA |
| 12 | s40230.vps.hosting 2a03:d9c0:2000::265 | 21.4ms | 0% | AS3214 | XTOM - xTom GmbH, DE |
tracepath -6
1?: [LOCALHOST] 0.031ms pmtu 1500
1: fw1-lju.6connect.com 0.671ms
1: fw1-lju.6connect.com 0.663ms
2: no reply
3: 2a00:ee1:800:9::1 2.360ms
4: 2a00:ee0:1:10::2 1.368ms asymm 3
5: 2a11:4142:2002:: 1.180ms asymm 6
6: r2-vie1-at.as5405.net 12.706ms asymm 15
7: r2-vie2-at.as5405.net 12.815ms asymm 13
8: r1-vie2-at.as5405.net 12.771ms asymm 12
9: r1-muc1-de.as5405.net 12.845ms asymm 12
10: 2001:7f8:44::151d:0:1 12.845ms
11: decix.muc.v.ps 21.778ms
12: s40230.vps.hosting 31.961ms !N
Resume: pmtu 1500