AS60087 - ASSUPERNOVA Netsons s.r.lPARPKI ✓ 1/1ASPA -

← back to summary

All countriesHomeState of IPv6TopologyIXPsAboutipv6.si ↗ Sparky
IPv6 prefix announced, but nothing inside is responding yet. AS60087 announces 1 IPv6 prefix(es) to the global routing table - that’s the part that BGP and our route-server scrape confirm. But our active discovery (curated hostnames, holder-derived domains, authoritative DNS NS/SOA/MX, certificate-transparency hostnames, RIPE Atlas, RDAP, IPv6 Hitlist) found no ICMPv6-responsive host inside the prefix on either vantage, and a yarrp pass against random addresses inside the prefix produced zero in-prefix hops (no router on the path through the AS replied with Time-Exceeded for any random target). That combination usually means the announcement is configured but the addresses inside aren’t in active use yet. The BGP route is there; the operational deployment is still ahead.

AS overview

Test target: 2a03:a500::1 · (no live host found) · address space: PA · prefixes announced: 1

prefix(es): 2a03:a500::/32

RPKI & ASPA

1 of 1 prefix(es) covered by a valid ROA.

PrefixRPKI stateReasonCovering VRP(s)
2a03:a500::/32✓ validmatched VRP (correct origin, length within maxLength)AS60087 /32 maxLen 32 (ripe)

Random-IP probe (yarrp) into the AS' prefixes

We probed 15 arbitrary IPv6 address(es) inside AS60087's announced prefix(es). No router inside the prefix responded. The deepest visible hop was 2001:4b78:2::c2 at hop 21 - that router does not answer ICMPv6 Echo. This is not in AS60087's announced prefix; operationally it's the AS-edge / peering interface (often on an IXP peering address or an upstream's /127 link). The traceroute boundary is the AS edge: ICMPv6 Time-Exceeded responses from anything inside this AS are filtered.

ICMPv6 Type 2 (Packet Too Big) acceptance - active test

Type 2 active test inconclusive: no Echo Reply to 1300-byte probe.
method: ICMPv6 Echo + forged PTB, tested 2026-05-25T12:32:25Z

Failure detail — what to grep in your logs
vantageour sourceyour targetmethodresulttested (UTC)
go6lab2a00:8642:42::752a03:a500::1icmp6-echono_echo2026-05-25T12:32:25Z
karsolink2a12:d8c0:105a:9001::a1542a03:a500::1icmp6-echono_echo2026-05-25T12:40:42Z
odin2607:fae0:a000::422a03:a500::1icmp6-echono_echo2026-05-25T12:32:08Z

Attempt log (go6lab):

  1. icmp6-echono_echo: no Echo Reply to 1300-byte probe
  2. dns-tcpno_tcp: connect failed: [Errno 113] No route to host
  3. tlsno_tcp: TLS connect failed
  4. httpno_tcp: tcp/80 not open

Attempt log (karsolink):

  1. icmp6-echono_echo: no Echo Reply to 1300-byte probe
  2. dns-tcpno_tcp: connect failed: [Errno 113] No route to host
  3. tlsno_tcp: TLS connect failed
  4. httpno_tcp: tcp/80 not open

Attempt log (odin):

  1. icmp6-echono_echo: no Echo Reply to 1300-byte probe
  2. dns-tcpno_tcp: connect failed: [Errno 113] No route to host
  3. tlsno_tcp: TLS connect failed
  4. httpno_tcp: tcp/80 not open

To match the corresponding ICMPv6 packet on your side (host firewall, AS edge, or transit tap), look for our PTBs around the timestamps above:

sudo tcpdump -i any -n -e 'icmp6 and ip6[40] = 2 and (src host 2607:fae0:a000::42 or src host 2a00:8642:42::75 or src host 2a12:d8c0:105a:9001::a154)'

If you see our PTBs arriving but the destination's TCP/Echo flow does not shrink, the drop is in the destination kernel (cause 3 below). If you don't see them at all, drop is upstream of you (cause 2). If you only see them from one of our two source IPs, the drop is path-asymmetric — one transit on the asymmetric route is filtering, the other is not.

From NL host (go6lab)   transit only unreachable

filter likely at: past AS12637 (SEEWEB) · min PMTU on path: 1500

0/4
Echo small (56B) -
0/4
Echo 1500B (DF) -
no
Type 1 dest-unreach
-
TCP responds on

Path (traceroute + mtr + PTR)

#IP / PTRRTTmtr lossASAS holder
12a00:8642:42::31.0ms0%AS203993STEFFANN-DC-AS - S.J.M. Steffann, NL
2*-0%*-
3ccr2-ccr1.dc1.nogalliance.org
2a00:8642:dc1:2::b
1.8ms0%AS203993STEFFANN-DC-AS - S.J.M. Steffann, NL
4ams-ix.mil.seeweb.it
2001:7f8:1::a501:2637:1
22.0ms0%-NA
52001:4b78:2::c220.6ms0%AS12637SEEWEB - SEEWEB s.r.l., IT
62001:4b78:2::c220.0ms0%AS12637SEEWEB - SEEWEB s.r.l., IT

tracepath -6

 1?: [LOCALHOST]                        0.036ms pmtu 1500
 1:  2a00:8642:42::3                                       1.469ms 
 1:  2a00:8642:42::3                                       1.326ms 
 2:  gw.friends.steffann.nl                                2.320ms 
 3:  ccr2-ccr1.dc1.nogalliance.org                         2.130ms asymm  2 
 4:  ams-ix.mil.seeweb.it                                106.612ms asymm  5 
 5:  2001:4b78:2::c2                                      19.997ms asymm  6 
 6:  2001:4b78:2::c2                                      20.586ms !H
     Resume: pmtu 1500 

From ITA host (Karsolink)   transit only unreachable

filter likely at: past AS12637 (SEEWEB) · min PMTU on path: 1500

0/4
Echo small (56B) -
0/4
Echo 1500B (DF) -
no
Type 1 dest-unreach
-
TCP responds on

Path (traceroute + mtr + PTR)

#IP / PTRRTTmtr lossASAS holder
1karsolink-01.net.karsolink.com
2a12:d8c0:105a:9001::1
0.4ms-AS204471KARSOLINK - 2S Computers SRL, IT
22a12:d8c0:109f:121::a10.5ms0%*AS204471KARSOLINK - 2S Computers SRL, IT
32a12:d8c0:101f:6::19.9ms20%AS204471KARSOLINK - 2S Computers SRL, IT
4seeweb.minap.it
2001:7f8:c5::a501:2637:1
10.5ms0%AS12637Seeweb s.r.l.
52001:4b78:2::c210.6ms0%AS12637SEEWEB - SEEWEB s.r.l., IT
62001:4b78:2::c211.1ms0%AS12637SEEWEB - SEEWEB s.r.l., IT

Rate-limited ICMPv6: hop 3 (loss between 5% and 95% across mtr cycles - the router replies but only sometimes).

tracepath -6

 1?: [LOCALHOST]                        0.039ms pmtu 1500
 1:  karsolink-01.net.karsolink.com                        0.784ms 
 2:  2a12:d8c0:109f:121::a1                                0.891ms 
 3:  2a12:d8c0:101f:6::1                                  10.442ms 
 4:  seeweb.minap.it                                     109.838ms 
 5:  2001:4b78:2::c2                                      11.450ms 
 6:  2001:4b78:2::c2                                      35.301ms !H
     Resume: pmtu 1500 

From SLO host (6connect)   transit only unreachable

filter likely at: past AS12637 (SEEWEB) · min PMTU on path: 1500

0/4
Echo small (56B) -
0/4
Echo 1500B (DF) -
no
Type 1 dest-unreach
-
TCP responds on

Path (traceroute + mtr + PTR)

#IP / PTRRTTmtr lossASAS holder
1fw1-lju.6connect.com
2607:fae0:a000::2
0.3ms0%*AS80386CONNECT - 6connect, Inc., US
2*-0%*-
32a03:a100:0:201:1::10.7ms0%AS56635XENYA - XENYA inzeniring, proizvodnja in trgovina, d.o.o. Ljubljana, SI
4e0-1.core1.lju1.he.net
2001:470:1:5be::1
1.6ms0%AS6939HURRICANE - Hurricane Electric LLC, US
5*---
6port-channel1.core1.zag2.he.net
2001:470:0:2ea::2
4.1ms0%AS6939HURRICANE - Hurricane Electric LLC, US
7*---
8seeweb.minap.it
2001:7f8:c5::a501:2637:1
112.9ms0%AS12637Seeweb s.r.l.
9*-0%-
102001:4b78:2::c213.3ms0%AS12637SEEWEB - SEEWEB s.r.l., IT

tracepath -6

 1?: [LOCALHOST]                        0.027ms pmtu 1500
 1:  fw1-lju.6connect.com                                  0.666ms 
 1:  fw1-lju.6connect.com                                  0.464ms 
 2:  no reply
 3:  no reply
 4:  e0-1.core1.lju1.he.net                                2.098ms 
 5:  no reply
 6:  port-channel1.core1.zag2.he.net                       4.329ms 
 7:  no reply
 8:  seeweb.minap.it                                      12.451ms 
 9:  2001:4b78:2::c2                                      13.245ms 
10:  2001:4b78:2::c2                                      12.962ms !H
     Resume: pmtu 1500