AS31686 - NETISON-AS NETisON SRLPARPKI ✓ 1/1ASPA -

← back to summary

All countriesHomeState of IPv6TopologyIXPsAboutipv6.si ↗ Sparky
IPv6 prefix announced, but nothing inside is responding yet. AS31686 announces 1 IPv6 prefix(es) to the global routing table - that’s the part that BGP and our route-server scrape confirm. But our active discovery (curated hostnames, holder-derived domains, authoritative DNS NS/SOA/MX, certificate-transparency hostnames, RIPE Atlas, RDAP, IPv6 Hitlist) found no ICMPv6-responsive host inside the prefix on either vantage, and a yarrp pass against random addresses inside the prefix produced zero in-prefix hops (no router on the path through the AS replied with Time-Exceeded for any random target). That combination usually means the announcement is configured but the addresses inside aren’t in active use yet. The BGP route is there; the operational deployment is still ahead.

AS overview

Test target: 2a14:4440::1 · (no live host found) · address space: PA · prefixes announced: 1

prefix(es): 2a14:4440::/29

RPKI & ASPA

1 of 1 prefix(es) covered by a valid ROA.

PrefixRPKI stateReasonCovering VRP(s)
2a14:4440::/29✓ validmatched VRP (correct origin, length within maxLength)AS31686 /29 maxLen 29 (ripe)

Random-IP probe (yarrp) into the AS' prefixes

We probed 15 arbitrary IPv6 address(es) inside AS31686's announced prefix(es). No router inside the prefix responded. The deepest visible hop was 2a11:4141:5002::11 at hop 15 - that router answers ICMPv6 Echo. This is not in AS31686's announced prefix; operationally it's the AS-edge / peering interface (often on an IXP peering address or an upstream's /127 link). The traceroute boundary is the AS edge: ICMPv6 Time-Exceeded responses from anything inside this AS are filtered.

ICMPv6 Type 2 (Packet Too Big) acceptance - active test

Type 2 active test inconclusive: no Echo Reply to 1300-byte probe.
method: ICMPv6 Echo + forged PTB, tested 2026-05-25T12:38:56Z

Failure detail — what to grep in your logs
vantageour sourceyour targetmethodresulttested (UTC)
go6lab2a00:8642:42::752a14:4440::1icmp6-echono_echo2026-05-25T12:38:56Z
karsolink2a12:d8c0:105a:9001::a1542a14:4440::1icmp6-echono_echo2026-05-25T12:51:18Z
odin2607:fae0:a000::422a14:4440::1icmp6-echono_echo2026-05-25T12:38:25Z

Attempt log (go6lab):

  1. icmp6-echo → no_echo: no Echo Reply to 1300-byte probe
  2. dns-tcp → no_tcp: connect failed: timed out
  3. tls → no_tcp: TLS connect failed
  4. http → no_tcp: tcp/80 not open

Attempt log (karsolink):

  1. icmp6-echo → no_echo: no Echo Reply to 1300-byte probe
  2. dns-tcp → no_tcp: connect failed: timed out
  3. tls → no_tcp: TLS connect failed
  4. http → no_tcp: tcp/80 not open

Attempt log (odin):

  1. icmp6-echo → no_echo: no Echo Reply to 1300-byte probe
  2. dns-tcp → no_tcp: connect failed: timed out
  3. tls → no_tcp: TLS connect failed
  4. http → no_tcp: tcp/80 not open

To match the corresponding ICMPv6 packet on your side (host firewall, AS edge, or transit tap), look for our PTBs around the timestamps above:

sudo tcpdump -i any -n -e 'icmp6 and ip6[40] = 2 and (src host 2607:fae0:a000::42 or src host 2a00:8642:42::75 or src host 2a12:d8c0:105a:9001::a154)'

If you see our PTBs arriving but the destination's TCP/Echo flow does not shrink, the drop is in the destination kernel (cause 3 below). If you don't see them at all, drop is upstream of you (cause 2). If you only see them from one of our two source IPs, the drop is path-asymmetric — one transit on the asymmetric route is filtering, the other is not.

From NL host (go6lab)   transit only unreachable

filter likely at: past AS5405 (INTERDOTLINK) · min PMTU on path: 1500

0/4
Echo small (56B) -
0/4
Echo 1500B (DF) -
no
Type 1 dest-unreach
-
TCP responds on

Path (traceroute + mtr + PTR)

#IP / PTRRTTmtr lossASAS holder
12a00:8642:42::33.2ms0%AS203993STEFFANN-DC-AS - S.J.M. Steffann, NL
2gw.friends.steffann.nl
2a00:8642:1000:f000::1		2.9ms0%*AS203993STEFFANN-DC-AS - S.J.M. Steffann, NL
32a00:1ca8:1::1943.9ms30%AS50673Serverius-as - Serverius Holding B.V., NL
42a03:3f40::10:413.2ms0%AS50673Serverius-as - Serverius Holding B.V., NL
5speed-ix.inter.link
2001:7f8:b7::a500:5405:1		3.9ms0%-NA
6r4-ams1-nl.as5405.net
2a11:4140::10		20.5ms0%AS5405INTERDOTLINK - Inter.link GmbH, DE
7r6-ams1-nl.as5405.net
2a11:4140::54		20.5ms0%AS5405INTERDOTLINK - Inter.link GmbH, DE
8r4-fra3-de.as5405.net
2a11:4140::37		21.0ms0%AS5405INTERDOTLINK - Inter.link GmbH, DE
9r3-fra2-de.as5405.net
2a11:4140::a		21.3ms0%AS5405INTERDOTLINK - Inter.link GmbH, DE
10r4-fra2-de.as5405.net
2a11:4140::b		20.2ms0%AS5405INTERDOTLINK - Inter.link GmbH, DE
11r7-fra1-de.as5405.net
2a11:4140::4c		20.2ms0%AS5405INTERDOTLINK - Inter.link GmbH, DE
12r3-fra1-de.as5405.net
2a11:4140::6		20.8ms0%AS5405INTERDOTLINK - Inter.link GmbH, DE
13r1-zrh1-ch.as5405.net
2a11:4140::25		21.2ms0%AS5405INTERDOTLINK - Inter.link GmbH, DE
14r1-mil1-it.as5405.net
2a11:4140::29		20.1ms0%AS5405INTERDOTLINK - Inter.link GmbH, DE
152a11:4141:5002::1121.6ms0%AS5405INTERDOTLINK - Inter.link GmbH, DE
16*---
17*---
18*---
19*---
20*---
21*---
22*---
23*---
24*---

Rate-limited ICMPv6: hop 3 (loss between 5% and 95% across mtr cycles - the router replies but only sometimes).

tracepath -6

 1?: [LOCALHOST]                        0.031ms pmtu 1500
 1:  2a00:8642:42::3                                       1.702ms 
 1:  2a00:8642:42::3                                       1.654ms 
 2:  gw.friends.steffann.nl                                2.615ms 
 3:  2a00:1ca8:1::194                                      3.574ms 
 4:  2a03:3f40::10:41                                      3.000ms 
 5:  speed-ix.inter.link                                   4.587ms asymm  4 
 6:  r4-ams1-nl.as5405.net                                20.788ms asymm 21 
 7:  r6-ams1-nl.as5405.net                                20.181ms asymm 20 
 8:  r4-fra3-de.as5405.net                                20.845ms asymm 19 
 9:  r3-fra2-de.as5405.net                                21.017ms asymm 18 
10:  r4-fra2-de.as5405.net                                20.326ms asymm 17 
11:  r7-fra1-de.as5405.net                                20.486ms asymm 16 
12:  r3-fra1-de.as5405.net                                20.131ms asymm 15 
13:  r1-zrh1-ch.as5405.net                                20.457ms asymm 14 
14:  r1-mil1-it.as5405.net                                20.711ms asymm 13 
15:  2a11:4141:5002::11                                   20.868ms asymm 13 
16:  no reply
17:  no reply
18:  no reply
19:  no reply
20:  no reply
21:  no reply
22:  no reply
23:  no reply
24:  no reply
     Too many hops: pmtu 1500
     Resume: pmtu 1500

From ITA host (Karsolink)   transit only unreachable

filter likely at: past AS50877 (AIRBEAM-AS) · min PMTU on path: 1500

0/4
Echo small (56B) -
0/4
Echo 1500B (DF) -
no
Type 1 dest-unreach
-
TCP responds on

Path (traceroute + mtr + PTR)

#IP / PTRRTTmtr lossASAS holder
1*-0%*-
2*---
32a12:d8c0:109f:106::a23.2ms0%AS204471KARSOLINK - 2S Computers SRL, IT
42a12:d8c0:1a1::a24.1ms0%AS204471KARSOLINK - 2S Computers SRL, IT
52a0a:f980:0:103::1169.5ms0%AS50877AIRBEAM-AS - Airbeam S.r.l., IT
6*---
7*---
8*---
9*---
10*---
11*---
12*---
13*---
14*---
15*---
16*---
17*---
18*---
19*---
20*---
21*---
22*---
23*---
24*---

tracepath -6

 1?: [LOCALHOST]                        0.028ms pmtu 1500
 1:  karsolink-01.net.karsolink.com                        0.779ms 
 2:  2a12:d8c0:109f:121::a1                                0.984ms 
 3:  2a12:d8c0:109f:106::a2                                3.720ms 
 4:  2a12:d8c0:1a1::a2                                     4.049ms 
 5:  2a0a:f980:0:104::1                                    9.325ms 
 6:  no reply
 7:  no reply
 8:  no reply
 9:  no reply
10:  no reply
11:  no reply
12:  no reply
13:  no reply
14:  no reply
15:  no reply
16:  no reply
17:  no reply
18:  no reply
19:  no reply
20:  no reply
21:  no reply
22:  no reply
23:  no reply
24:  no reply
     Too many hops: pmtu 1500
     Resume: pmtu 1500

From SLO host (6connect)   transit only unreachable

filter likely at: past AS5405 (INTERDOTLINK) · min PMTU on path: 1500

0/4
Echo small (56B) -
0/4
Echo 1500B (DF) -
no
Type 1 dest-unreach
-
TCP responds on

Path (traceroute + mtr + PTR)

#IP / PTRRTTmtr lossASAS holder
1fw1-lju.6connect.com
2607:fae0:a000::2		4.5ms0%*AS80386CONNECT - 6connect, Inc., US
2*---
3*---
42a00:ee0:1:10::20.9ms0%AS5603SIOL-NET - Telekom Slovenije, d.d., SI
52a11:4142:20021.3ms0%-
62620:107:4008:e85::27.9ms0%-NA
72a11:4141:5002::118.2ms0%AS5405INTERDOTLINK - Inter.link GmbH, DE
8*---
9*---
10*---
11*---
12*---
13*---
14*---
15*---
16*---
17*---
18*---
19*---
20*---
21*---
22*---
23*---
24*---

tracepath -6

 1?: [LOCALHOST]                        0.026ms pmtu 1500
 1:  fw1-lju.6connect.com                                  0.422ms 
 1:  fw1-lju.6connect.com                                  0.380ms 
 2:  no reply
 3:  2a00:ee1:800:9::1                                     2.361ms 
 4:  2a00:ee0:1:10::2                                      1.062ms asymm  3 
 5:  2a11:4142:2002::                                      1.166ms asymm  6 
 6:  2620:107:4008:e85::2                                  8.266ms asymm  7 
 7:  2a11:4141:5002::11                                    8.361ms asymm  6 
 8:  no reply
 9:  no reply
10:  no reply
11:  no reply
12:  no reply
13:  no reply
14:  no reply
15:  no reply
16:  no reply
17:  no reply
18:  no reply
19:  no reply
20:  no reply
21:  no reply
22:  no reply
23:  no reply
24:  no reply
     Too many hops: pmtu 1500
     Resume: pmtu 1500