IPv6 prefix announced, but nothing inside is responding yet. AS60049 announces 2 IPv6 prefix(es) to the global routing table - that’s the part that BGP and our route-server scrape confirm. But our active discovery (curated hostnames, holder-derived domains, authoritative DNS NS/SOA/MX, certificate-transparency hostnames, RIPE Atlas, RDAP, IPv6 Hitlist) found no ICMPv6-responsive host inside the prefix on either vantage, and a yarrp pass against random addresses inside the prefix produced zero in-prefix hops (no router on the path through the AS replied with Time-Exceeded for any random target). That combination usually means the announcement is configured but the addresses inside aren’t in active use yet. The BGP route is there; the operational deployment is still ahead.
AS overview
Test target: 2a02:46e0:face::1 · (no live host found) · address space: unknown · prefixes announced: 2
prefix(es): 2a02:46e0:face::/48, 2a02:46e0::/32
RPKI & ASPA
2 of 2 prefix(es) covered by a valid ROA.
| Prefix | RPKI state | Reason | Covering VRP(s) |
|---|---|---|---|
2a02:46e0:face::/48 | ✓ valid | matched VRP (correct origin, length within maxLength) | AS60049 /32 maxLen 48 (ripe) |
2a02:46e0::/32 | ✓ valid | matched VRP (correct origin, length within maxLength) | AS60049 /32 maxLen 48 (ripe) |
Random-IP probe (yarrp) into the AS' prefixes
We probed 30 arbitrary IPv6 address(es) inside AS60049's announced prefix(es). No router inside the prefix responded. The deepest visible hop was 2001:470:12:131::2 at hop 23 - that router answers ICMPv6 Echo. This is not in AS60049's announced prefix; operationally it's the AS-edge / peering interface (often on an IXP peering address or an upstream's /127 link). The traceroute boundary is the AS edge: ICMPv6 Time-Exceeded responses from anything inside this AS are filtered.
ICMPv6 Type 2 (Packet Too Big) acceptance - active test
Type 2 active test inconclusive: no Echo Reply to 1300-byte probe.
method: ICMPv6 Echo + forged PTB, tested 2026-05-25T12:31:29Z
Failure detail — what to grep in your logs
| vantage | our source | your target | method | result | tested (UTC) |
|---|---|---|---|---|---|
| go6lab | 2a00:8642:42::75 | 2a02:46e0:face::1 | icmp6-echo | no_echo | 2026-05-25T12:31:29Z |
| karsolink | 2a12:d8c0:105a:9001::a154 | 2a02:46e0:face::1 | icmp6-echo | no_echo | 2026-05-25T12:38:57Z |
| odin | 2607:fae0:a000::42 | 2a02:46e0:face::1 | icmp6-echo | no_echo | 2026-05-25T12:31:14Z |
Attempt log (go6lab):
icmp6-echo→ no_echo: no Echo Reply to 1300-byte probedns-tcp→ no_tcp: connect failed: timed outtls→ no_tcp: TLS connect failedhttp→ no_tcp: tcp/80 not open
Attempt log (karsolink):
icmp6-echo→ no_echo: no Echo Reply to 1300-byte probedns-tcp→ no_tcp: connect failed: timed outtls→ no_tcp: TLS connect failedhttp→ no_tcp: tcp/80 not open
Attempt log (odin):
icmp6-echo→ no_echo: no Echo Reply to 1300-byte probedns-tcp→ no_tcp: connect failed: timed outtls→ no_tcp: TLS connect failedhttp→ no_tcp: tcp/80 not open
To match the corresponding ICMPv6 packet on your side (host firewall, AS edge, or transit tap), look for our PTBs around the timestamps above:
sudo tcpdump -i any -n -e 'icmp6 and ip6[40] = 2 and (src host 2607:fae0:a000::42 or src host 2a00:8642:42::75 or src host 2a12:d8c0:105a:9001::a154)'
If you see our PTBs arriving but the destination's TCP/Echo flow does not shrink, the drop is in the destination kernel (cause 3 below). If you don't see them at all, drop is upstream of you (cause 2). If you only see them from one of our two source IPs, the drop is path-asymmetric — one transit on the asymmetric route is filtering, the other is not.
From NL host (go6lab) transit only unreachable
filter likely at: past AS6939 (HURRICANE) · min PMTU on path: 1480
0/4
Echo small (56B) -
0/4
Echo 1500B (DF) -
no
Type 1 dest-unreach
-
TCP responds on
Path (traceroute + mtr + PTR)
| # | IP / PTR | RTT | mtr loss | AS | AS holder |
|---|---|---|---|---|---|
| 1 | 2a00:8642:42::3 | 0.9ms | 0% | AS203993 | STEFFANN-DC-AS - S.J.M. Steffann, NL |
| 2 | gw.friends.steffann.nl 2a00:8642:1000:f000::1 | 2.2ms | 0%* | AS203993 | STEFFANN-DC-AS - S.J.M. Steffann, NL |
| 3 | 2a00:1ca8:1::194 | 2.1ms | 0% | AS50673 | Serverius-as - Serverius Holding B.V., NL |
| 4 | 2a03:3f40::10:41 | 3.7ms | 0% | AS50673 | Serverius-as - Serverius Holding B.V., NL |
| 5 | ix-ge-100-0-0-66.qhar2.ad1-amsterdam.ipv6.as6453.net 2a01:3e0:30:1::1 | 4.5ms | 0% | AS6453 | AS6453 - TATA COMMUNICATIONS (AMERICA) INC, US |
| 6 | if-bundle-2-2.qcore1.ad1-amsterdam.ipv6.as6453.net 2a01:3e0:701::7 | 4.5ms | 0% | AS6453 | AS6453 - TATA COMMUNICATIONS (AMERICA) INC, US |
| 7 | * | - | 70% | - | |
| 8 | if-bundle-9-2.qcore1.fnm-frankfurt.ipv6.as6453.net 2a01:3e0:ff40:20::25 | 9.2ms | 0% | AS6453 | AS6453 - TATA COMMUNICATIONS (AMERICA) INC, US |
| 9 | if-bundle-67-2.qcore2.fr0-frankfurt.ipv6.as6453.net 2a01:3e0:ff00::115 | 9.4ms | 10% | AS6453 | AS6453 - TATA COMMUNICATIONS (AMERICA) INC, US |
| 10 | if-be-25-2.ecore1.fr0-frankfurt.ipv6.as6453.net 2a01:3e0:ff20:400::25 | 10.4ms | 0% | AS6453 | AS6453 - TATA COMMUNICATIONS (AMERICA) INC, US |
| 11 | 2a01:3e0:ff20:110::5 | 13.1ms | 0% | AS6453 | AS6453 - TATA COMMUNICATIONS (AMERICA) INC, US |
| 12 | * | - | - | - | |
| 13 | e0-35.core2.dus1.he.net 2001:470:0:371::2 | 10.4ms | 0% | AS6939 | HURRICANE - Hurricane Electric LLC, US |
| 14 | tserv2.dus1.he.net 2001:470:0:3b2::2 | 10.9ms | 0% | AS6939 | HURRICANE - Hurricane Electric LLC, US |
| 15 | tunnel347319-pt.tunnel.tserv18.dus1.ipv6.he.net 2001:470:12:131::2 | 97.5ms | 0% | AS6939 | HURRICANE - Hurricane Electric LLC, US |
| 16 | * | - | - | - | |
| 17 | * | - | - | - | |
| 18 | * | - | - | - | |
| 19 | * | - | - | - | |
| 20 | * | - | - | - | |
| 21 | * | - | - | - | |
| 22 | * | - | - | - | |
| 23 | * | - | - | - | |
| 24 | * | - | - | - |
Rate-limited ICMPv6: hop 7, hop 9 (loss between 5% and 95% across mtr cycles - the router replies but only sometimes).
tracepath -6
1?: [LOCALHOST] 0.029ms pmtu 1480
1: 2a00:8642:42::3 1.397ms
1: 2a00:8642:42::3 2.297ms
2: gw.friends.steffann.nl 2.290ms
3: 2a00:1ca8:1::194 2.693ms
4: 2a03:3f40::10:41 2.131ms
5: ix-ge-100-0-0-66.qhar2.ad1-amsterdam.ipv6.as6453.net 5.687ms
6: if-bundle-2-2.qcore1.ad1-amsterdam.ipv6.as6453.net 3.239ms
7: if-bundle-51-2.qcore1.av2-amsterdam.ipv6.as6453.net 6.273ms
8: if-bundle-9-2.qcore1.fnm-frankfurt.ipv6.as6453.net 9.341ms
9: if-bundle-67-2.qcore2.fr0-frankfurt.ipv6.as6453.net 9.580ms
10: if-be-25-2.ecore1.fr0-frankfurt.ipv6.as6453.net 11.682ms
11: 2a01:3e0:ff20:110::5 13.331ms asymm 5
12: no reply
13: e0-35.core2.dus1.he.net 11.474ms asymm 5
14: tserv2.dus1.he.net 9.859ms asymm 6
15: tunnel347319-pt.tunnel.tserv18.dus1.ipv6.he.net 77.587ms asymm 7
16: no reply
17: no reply
18: no reply
19: no reply
20: no reply
21: no reply
22: no reply
23: no reply
24: no reply
Too many hops: pmtu 1480
Resume: pmtu 1480 From ITA host (Karsolink) transit only unreachable
filter likely at: past AS6939 (HURRICANE) · min PMTU on path: 1480
0/4
Echo small (56B) -
0/4
Echo 1500B (DF) -
no
Type 1 dest-unreach
-
TCP responds on
Path (traceroute + mtr + PTR)
| # | IP / PTR | RTT | mtr loss | AS | AS holder |
|---|---|---|---|---|---|
| 1 | * | - | 0%* | - | |
| 2 | 2a12:d8c0:109f:121::a1 | 0.4ms | 0%* | AS204471 | KARSOLINK - 2S Computers SRL, IT |
| 3 | 2a12:d8c0:101f:6::1 | 9.9ms | 0% | AS204471 | KARSOLINK - 2S Computers SRL, IT |
| 4 | * | - | - | - | |
| 5 | * | - | - | - | |
| 6 | * | - | - | - | |
| 7 | e0-36.core2.dus1.he.net 2001:470:0:52e::2 | 23.5ms | 0% | AS6939 | HURRICANE - Hurricane Electric LLC, US |
| 8 | tserv2.dus1.he.net 2001:470:0:3b2::2 | 23.3ms | 0% | AS6939 | HURRICANE - Hurricane Electric LLC, US |
| 9 | tunnel347319-pt.tunnel.tserv18.dus1.ipv6.he.net 2001:470:12:131::2 | 40.3ms | 0% | AS6939 | HURRICANE - Hurricane Electric LLC, US |
| 10 | * | - | - | - | |
| 11 | * | - | - | - | |
| 12 | * | - | - | - | |
| 13 | * | - | - | - | |
| 14 | * | - | - | - | |
| 15 | * | - | - | - | |
| 16 | * | - | - | - | |
| 17 | * | - | - | - | |
| 18 | * | - | - | - | |
| 19 | * | - | - | - | |
| 20 | * | - | - | - | |
| 21 | * | - | - | - | |
| 22 | * | - | - | - | |
| 23 | * | - | - | - | |
| 24 | * | - | - | - |
tracepath -6
1?: [LOCALHOST] 0.031ms pmtu 1500
1: karsolink-01.net.karsolink.com 0.642ms
1: karsolink-01.net.karsolink.com 0.744ms
2: 2a12:d8c0:109f:121::a1 0.996ms
3: 2a12:d8c0:101f:6::1 10.507ms
4: no reply
5: no reply
6: no reply
7: e0-36.core2.dus1.he.net 24.138ms
8: tserv2.dus1.he.net 24.317ms
9: tserv2.dus1.he.net 24.026ms pmtu 1480
9: tunnel347319-pt.tunnel.tserv18.dus1.ipv6.he.net 79.458ms
10: no reply
11: no reply
12: no reply
13: no reply
14: no reply
15: no reply
16: no reply
17: no reply
18: no reply
19: no reply
20: no reply
21: no reply
22: no reply
23: no reply
24: no reply
Too many hops: pmtu 1480From SLO host (6connect) transit only unreachable
filter likely at: past AS6939 (HURRICANE) · min PMTU on path: 1480
0/4
Echo small (56B) -
0/4
Echo 1500B (DF) -
no
Type 1 dest-unreach
-
TCP responds on
Path (traceroute + mtr + PTR)
| # | IP / PTR | RTT | mtr loss | AS | AS holder |
|---|---|---|---|---|---|
| 1 | fw1-lju.6connect.com 2607:fae0:a000::2 | 0.3ms | 0%* | AS8038 | 6CONNECT - 6connect, Inc., US |
| 2 | * | - | - | - | |
| 3 | 2a03:a100:0:201:1::1 | 0.7ms | 90% | AS56635 | XENYA - XENYA inzeniring, proizvodnja in trgovina, d.o.o. Ljubljana, SI |
| 4 | e0-1.core1.lju1.he.net 2001:470:1:5be::1 | 2.2ms | 70% | AS6939 | HURRICANE - Hurricane Electric LLC, US |
| 5 | 100ge0-0-0-5.core1.vie1.he.net 2001:470:0:578::1 | 7.3ms | 0% | AS6939 | HURRICANE - Hurricane Electric LLC, US |
| 6 | 100ge0-0-0-19.core2.fra2.he.net 2001:470:0:7ef::1 | 19.1ms | 0% | AS6939 | HURRICANE - Hurricane Electric LLC, US |
| 7 | be3.core4.fra1.he.net 2001:470:e:5a::2 | 17.9ms | 0% | AS6939 | HURRICANE - Hurricane Electric LLC, US |
| 8 | * | - | - | - | |
| 9 | e0-36.core2.dus1.he.net 2001:470:0:52e::2 | 21.4ms | 0% | AS6939 | HURRICANE - Hurricane Electric LLC, US |
| 10 | tserv2.dus1.he.net 2001:470:0:3b2::2 | 20.3ms | 0% | AS6939 | HURRICANE - Hurricane Electric LLC, US |
| 11 | tunnel347319-pt.tunnel.tserv18.dus1.ipv6.he.net 2001:470:12:131::2 | 116.2ms | 0% | AS6939 | HURRICANE - Hurricane Electric LLC, US |
| 12 | * | - | - | - | |
| 13 | * | - | - | - | |
| 14 | * | - | - | - | |
| 15 | * | - | - | - | |
| 16 | * | - | - | - | |
| 17 | * | - | - | - | |
| 18 | * | - | - | - | |
| 19 | * | - | - | - | |
| 20 | * | - | - | - | |
| 21 | * | - | - | - | |
| 22 | * | - | - | - | |
| 23 | * | - | - | - | |
| 24 | * | - | - | - |
Rate-limited ICMPv6: hop 3, hop 4 (loss between 5% and 95% across mtr cycles - the router replies but only sometimes).
tracepath -6
1?: [LOCALHOST] 0.029ms pmtu 1500
1: fw1-lju.6connect.com 0.549ms
1: fw1-lju.6connect.com 0.556ms
2: no reply
3: 2a03:a100:0:201:1::1 0.867ms
4: e0-1.core1.lju1.he.net 2.167ms
5: 100ge0-0-0-5.core1.vie1.he.net 9.587ms
6: 100ge0-0-0-19.core2.fra2.he.net 18.641ms asymm 7
7: be3.core4.fra1.he.net 18.668ms asymm 8
8: no reply
9: e0-36.core2.dus1.he.net 21.457ms
10: tserv2.dus1.he.net 20.604ms asymm 11
11: tserv2.dus1.he.net 20.617ms pmtu 1480
11: tunnel347319-pt.tunnel.tserv18.dus1.ipv6.he.net 113.514ms
12: no reply
13: no reply
14: no reply
15: no reply
16: no reply
17: no reply
18: no reply
19: no reply
20: no reply
21: no reply
22: no reply
23: no reply
24: no reply
Too many hops: pmtu 1480