AS overview
Test target: 2a0f:c2c0::1 · (no live host found) · address space: PA · prefixes announced: 7
prefix(es): 2a0f:c2c0::/29, 2a0f:ccc0::/29, 2a10:b740::/29, 2a0d:cc0::/29, 2a0f:7080::/29, 2a0e:4cc0::/29, 2a04:f440::/29
MIX-IT / NAMEX / MINAP / TOP-IX / VSIX / EQUINIX-MILAN / BGPX-ROME / NAMEX-BARI / PCIX / DECIX-PALERMO peering
Not an MIX-IT / NAMEX / MINAP / TOP-IX / VSIX / EQUINIX-MILAN / BGPX-ROME / NAMEX-BARI / PCIX / DECIX-PALERMO member, but our traceroute path crosses the MIX-IT / NAMEX / MINAP / TOP-IX / VSIX / EQUINIX-MILAN / BGPX-ROME / NAMEX-BARI / PCIX / DECIX-PALERMO LAN from SLO host (6connect) - reached via an MIX-IT / NAMEX / MINAP / TOP-IX / VSIX / EQUINIX-MILAN / BGPX-ROME / NAMEX-BARI / PCIX / DECIX-PALERMO-resident transit operator.
RPKI & ASPA
7 of 7 prefix(es) covered by a valid ROA.
| Prefix | RPKI state | Reason | Covering VRP(s) |
|---|---|---|---|
2a0f:c2c0::/29 | ✓ valid | matched VRP (correct origin, length within maxLength) | AS42550 /29 maxLen 29 (ripe) |
2a0f:ccc0::/29 | ✓ valid | matched VRP (correct origin, length within maxLength) | AS42550 /29 maxLen 29 (ripe) |
2a10:b740::/29 | ✓ valid | matched VRP (correct origin, length within maxLength) | AS42550 /29 maxLen 29 (ripe) |
2a0d:cc0::/29 | ✓ valid | matched VRP (correct origin, length within maxLength) | AS42550 /29 maxLen 29 (ripe) |
2a0f:7080::/29 | ✓ valid | matched VRP (correct origin, length within maxLength) | AS42550 /29 maxLen 29 (ripe) |
2a0e:4cc0::/29 | ✓ valid | matched VRP (correct origin, length within maxLength) | AS42550 /29 maxLen 29 (ripe) |
2a04:f440::/29 | ✓ valid | matched VRP (correct origin, length within maxLength) | AS42550 /29 maxLen 29 (ripe) |
Random-IP probe (yarrp) into the AS' prefixes
We probed 30 arbitrary IPv6 address(es) inside AS42550's announced prefix(es). No router inside the prefix responded. The deepest visible hop was 2a00:ae20:0:58::2 at hop 12 - that router answers ICMPv6 Echo. This is not in AS42550's announced prefix; operationally it's the AS-edge / peering interface (often on an IXP peering address or an upstream's /127 link). The traceroute boundary is the AS edge: ICMPv6 Time-Exceeded responses from anything inside this AS are filtered.
ICMPv6 Type 2 (Packet Too Big) acceptance - active test
Type 2 active test inconclusive: no Echo Reply to 1300-byte probe.
method: ICMPv6 Echo + forged PTB, tested 2026-05-25T12:37:28Z
Failure detail — what to grep in your logs
| vantage | our source | your target | method | result | tested (UTC) |
|---|---|---|---|---|---|
| go6lab | 2a00:8642:42::75 | 2a0f:c2c0::1 | icmp6-echo | no_echo | 2026-05-25T12:37:28Z |
| karsolink | 2a12:d8c0:105a:9001::a154 | 2a0f:c2c0::1 | icmp6-echo | no_echo | 2026-05-25T12:48:36Z |
| odin | 2607:fae0:a000::42 | 2a0f:c2c0::1 | icmp6-echo | no_echo | 2026-05-25T12:37:00Z |
Attempt log (go6lab):
icmp6-echo→ no_echo: no Echo Reply to 1300-byte probedns-tcp→ no_tcp: connect failed: timed outtls→ no_tcp: TLS connect failedhttp→ no_tcp: tcp/80 not open
Attempt log (karsolink):
icmp6-echo→ no_echo: no Echo Reply to 1300-byte probedns-tcp→ no_tcp: connect failed: timed outtls→ no_tcp: TLS connect failedhttp→ no_tcp: tcp/80 not open
Attempt log (odin):
icmp6-echo→ no_echo: no Echo Reply to 1300-byte probedns-tcp→ no_tcp: connect failed: timed outtls→ no_tcp: TLS connect failedhttp→ no_tcp: tcp/80 not open
To match the corresponding ICMPv6 packet on your side (host firewall, AS edge, or transit tap), look for our PTBs around the timestamps above:
sudo tcpdump -i any -n -e 'icmp6 and ip6[40] = 2 and (src host 2607:fae0:a000::42 or src host 2a00:8642:42::75 or src host 2a12:d8c0:105a:9001::a154)'
If you see our PTBs arriving but the destination's TCP/Echo flow does not shrink, the drop is in the destination kernel (cause 3 below). If you don't see them at all, drop is upstream of you (cause 2). If you only see them from one of our two source IPs, the drop is path-asymmetric — one transit on the asymmetric route is filtering, the other is not.
From NL host (go6lab) transit only unreachable
filter likely at: past AS60501 (SIRIUSTEC-IT) · min PMTU on path: 1500
Path (traceroute + mtr + PTR)
| # | IP / PTR | RTT | mtr loss | AS | AS holder |
|---|---|---|---|---|---|
| 1 | 2a00:8642:42::3 | 1.1ms | 0% | AS203993 | STEFFANN-DC-AS - S.J.M. Steffann, NL |
| 2 | gw.friends.steffann.nl 2a00:8642:1000:f000::1 | 2.4ms | 0%* | AS203993 | STEFFANN-DC-AS - S.J.M. Steffann, NL |
| 3 | 2a00:1ca8:1::194 | 2.7ms | 40% | AS50673 | Serverius-as - Serverius Holding B.V., NL |
| 4 | 2a03:3f40::10:41 | 2.7ms | 0% | AS50673 | Serverius-as - Serverius Holding B.V., NL |
| 5 | * | - | - | - | |
| 6 | * | - | 40% | - | |
| 7 | * | - | 80% | - | |
| 8 | 2001:978:3::a6 | 10.4ms | 0% | AS174 | COGENT-174 - Cogent Communications, LLC, US |
| 9 | 2001:41a8:20::51 | 24.0ms | 0% | AS6762 | SEABONE-NET - TELECOM ITALIA SPARKLE S.p.A., IT |
| 10 | 2001:41a8:28:1::22 | 19.9ms | 0% | AS6762 | SEABONE-NET - TELECOM ITALIA SPARKLE S.p.A., IT |
| 11 | 2a00:ae20:0:45::2 | 24.6ms | 0% | AS60501 | SIRIUSTEC-IT - Sirius Technology SRL, IT |
| 12 | 2a00:ae20:0:58::2 | 24.8ms | 0% | AS60501 | SIRIUSTEC-IT - Sirius Technology SRL, IT |
| 13 | * | - | - | - | |
| 14 | * | - | - | - | |
| 15 | * | - | - | - | |
| 16 | * | - | - | - | |
| 17 | * | - | - | - | |
| 18 | * | - | - | - | |
| 19 | * | - | - | - | |
| 20 | * | - | - | - | |
| 21 | * | - | - | - | |
| 22 | * | - | - | - | |
| 23 | * | - | - | - | |
| 24 | * | - | - | - |
Rate-limited ICMPv6: hop 3, hop 6, hop 7 (loss between 5% and 95% across mtr cycles - the router replies but only sometimes).
tracepath -6
1?: [LOCALHOST] 0.039ms pmtu 1500
1: 2a00:8642:42::3 1.883ms
1: 2a00:8642:42::3 1.422ms
2: gw.friends.steffann.nl 2.423ms
3: 2a00:1ca8:1::194 3.140ms
4: 2a03:3f40::10:41 2.890ms
5: no reply
6: no reply
7: no reply
8: 2001:978:3::a6 10.987ms asymm 9
9: 2001:41a8:20::51 20.842ms
10: 2001:41a8:28:1::22 23.053ms asymm 9
11: 2a00:ae20:0:45::2 25.965ms asymm 10
12: 2a00:ae20:0:58::2 27.334ms asymm 11
13: no reply
14: no reply
15: no reply
16: no reply
17: no reply
18: no reply
19: no reply
20: no reply
21: no reply
22: no reply
23: no reply
24: no reply
Too many hops: pmtu 1500
Resume: pmtu 1500 From ITA host (Karsolink) transit only unreachable
filter likely at: past AS60501 (SIRIUSTEC-IT) · min PMTU on path: 1500
Path (traceroute + mtr + PTR)
| # | IP / PTR | RTT | mtr loss | AS | AS holder |
|---|---|---|---|---|---|
| 1 | karsolink-01.net.karsolink.com 2a12:d8c0:105a:9001::1 | 0.3ms | 0%* | AS204471 | KARSOLINK - 2S Computers SRL, IT |
| 2 | 2a12:d8c0:109f:121::a1 | 0.4ms | 0%* | AS204471 | KARSOLINK - 2S Computers SRL, IT |
| 3 | 2a12:d8c0:101f:6::1 | 10.0ms | 90% | AS204471 | KARSOLINK - 2S Computers SRL, IT |
| 4 | siriustec.minap.it 2001:7f8:c5::a506:501:1 | 10.1ms | 0% | - | NA |
| 5 | 2a00:ae20:0:45::2 | 15.1ms | 0% | AS60501 | SIRIUSTEC-IT - Sirius Technology SRL, IT |
| 6 | 2a00:ae20:0:58::2 | 16.6ms | 0% | AS60501 | SIRIUSTEC-IT - Sirius Technology SRL, IT |
| 7 | * | - | - | - | |
| 8 | * | - | - | - | |
| 9 | * | - | - | - | |
| 10 | * | - | - | - | |
| 11 | * | - | - | - | |
| 12 | * | - | - | - | |
| 13 | * | - | - | - | |
| 14 | * | - | - | - | |
| 15 | * | - | - | - | |
| 16 | * | - | - | - | |
| 17 | * | - | - | - | |
| 18 | * | - | - | - | |
| 19 | * | - | - | - | |
| 20 | * | - | - | - | |
| 21 | * | - | - | - | |
| 22 | * | - | - | - | |
| 23 | * | - | - | - | |
| 24 | * | - | - | - |
Rate-limited ICMPv6: hop 3 (loss between 5% and 95% across mtr cycles - the router replies but only sometimes).
tracepath -6
1?: [LOCALHOST] 0.029ms pmtu 1500
1: karsolink-01.net.karsolink.com 0.966ms
1: no reply
2: 2a12:d8c0:109f:121::a1 1.006ms
3: 2a12:d8c0:101f:6::1 10.363ms
4: siriustec.minap.it 10.583ms
5: 2a00:ae20:0:45::2 15.618ms
6: 2a00:ae20:0:58::2 17.285ms
7: no reply
8: no reply
9: no reply
10: no reply
11: no reply
12: no reply
13: no reply
14: no reply
15: no reply
16: no reply
17: no reply
18: no reply
19: no reply
20: no reply
21: no reply
22: no reply
23: no reply
24: no reply
Too many hops: pmtu 1500
Resume: pmtu 1500 From SLO host (6connect) transit only unreachable
filter likely at: past AS60501 (SIRIUSTEC-IT) · min PMTU on path: 1500
Path (traceroute + mtr + PTR)
| # | IP / PTR | RTT | mtr loss | AS | AS holder |
|---|---|---|---|---|---|
| 1 | fw1-lju.6connect.com 2607:fae0:a000::2 | 0.3ms | 0%* | AS8038 | 6CONNECT - 6connect, Inc., US |
| 2 | * | - | - | - | |
| 3 | * | - | - | - | |
| 4 | e0-1.core1.lju1.he.net 2001:470:1:5be::1 | 2.1ms | 0% | AS6939 | HURRICANE - Hurricane Electric LLC, US |
| 5 | * | - | - | - | |
| 6 | port-channel1.core1.zag2.he.net 2001:470:0:2ea::2 | 3.9ms | 50% | AS6939 | HURRICANE - Hurricane Electric LLC, US |
| 7 | * | - | - | - | |
| 8 | siriustechnology-v6.mix-it.net @MIX-IT / NAMEX / MINAP / TOP-IX / VSIX / EQUINIX-MILAN / BGPX-ROME / NAMEX-BARI / PCIX / DECIX-PALERMO 2001:7f8:b:100:1d1:a5d6:501:138 | 12.4ms | 0% | - | NA |
| 9 | 2a00:ae20:0:45::2 | 17.2ms | 0% | AS60501 | SIRIUSTEC-IT - Sirius Technology SRL, IT |
| 10 | 2a00:ae20:0:58::2 | 18.6ms | 0% | AS60501 | SIRIUSTEC-IT - Sirius Technology SRL, IT |
| 11 | * | - | - | - | |
| 12 | * | - | - | - | |
| 13 | * | - | - | - | |
| 14 | * | - | - | - | |
| 15 | * | - | - | - | |
| 16 | * | - | - | - | |
| 17 | * | - | - | - | |
| 18 | * | - | - | - | |
| 19 | * | - | - | - | |
| 20 | * | - | - | - | |
| 21 | * | - | - | - | |
| 22 | * | - | - | - | |
| 23 | * | - | - | - | |
| 24 | * | - | - | - |
Rate-limited ICMPv6: hop 6 (loss between 5% and 95% across mtr cycles - the router replies but only sometimes).
tracepath -6
1?: [LOCALHOST] 0.030ms pmtu 1500
1: fw1-lju.6connect.com 0.534ms
1: fw1-lju.6connect.com 0.465ms
2: no reply
3: no reply
4: e0-1.core1.lju1.he.net 2.176ms
5: no reply
6: port-channel1.core1.zag2.he.net 4.128ms
7: no reply
8: siriustec.minap.it 12.549ms
9: 2a00:ae20:0:45::2 17.177ms
10: 2a00:ae20:0:58::2 18.986ms
11: no reply
12: no reply
13: no reply
14: no reply
15: no reply
16: no reply
17: no reply
18: no reply
19: no reply
20: no reply
21: no reply
22: no reply
23: no reply
24: no reply
Too many hops: pmtu 1500
Resume: pmtu 1500