AS62275 - S.R.LPARFC 4890 ✗RPKI ✓ 5/5ASPA -

AS overview

Test target: 2a04:8640:8640:0:185:40:212:212 · one.dns.nhm.it · address space: PA · prefixes announced: 5

prefix(es): 2a04:8640::/29, 2a01:ab40::/29, 2a0c:8000::/29, 2a0c:e2c0::/29, 2a10:acc0::/29

MIX-IT / NAMEX / MINAP / TOP-IX / VSIX / EQUINIX-MILAN / BGPX-ROME / NAMEX-BARI / PCIX / DECIX-PALERMO peering

Random-IP probe (yarrp) into the AS' prefixes

We probed 70 arbitrary IPv6 address(es) inside AS62275's announced prefix(es). No router inside the prefix responded. The deepest visible hop was 2001:7f8:b:100:1d1:a5d6:2275:35 at hop 8 - that router does not answer ICMPv6 Echo. This is not in AS62275's announced prefix; operationally it's the AS-edge / peering interface (often on an IXP peering address or an upstream's /127 link). The traceroute boundary is the AS edge: ICMPv6 Time-Exceeded responses from anything inside this AS are filtered.

ICMPv6 Type 2 (Packet Too Big) acceptance - active test

Type 2 not honored. Forged ICMPv6 PTB (MTU=1280) had no effect: the next 1500-byte Echo Reply still arrived whole (1460 B, no Fragment Header). PMTUD does not work toward this address from us.
method: ICMPv6 Echo + forged PTB, tested 2026-09-23T12:03:58Z

sudo tcpdump -i any -n -e 'icmp6 and ip6[40] = 2 and (src host 2607:fae0:a000::42 or src host 2a00:8642:42::75 or src host 2a01:261:313:b814:2a0:98ff:fe5b:13e4 or src host 2a06:d1c1:10b::cccc or src host 2a06:d1c1:10d::aaaa or src host 2a09:ab81::91 or src host 2a12:d8c0:105a:9001::a154)'

sudo ip6tables -L INPUT -nv | grep -iE 'icmpv6|packet-too-big'
sudo nft list ruleset 2>/dev/null | grep -A1 'icmpv6'

sudo sysctl net.ipv6.conf.all.accept_redirects net.ipv4.ip_no_pmtu_disc net.ipv6.route.mtu_expires

sudo tcpdump -i any -n -e 'icmp6 and ip6[40] = 2 and (src host 2607:fae0:a000::42 or src host 2a00:8642:42::75 or src host 2a12:d8c0:105a:9001::a154 or src host 2a09:ab81::91 or src host 2a01:261:313:b814:2a0:98ff:fe5b:13e4 or src host 2a06:d1c1:10a::bbbb or src host 2a06:d1c1:10d::aaaa or src host 2a06:d1c1:10b::cccc)'

Multi-vantage path map

Every hop of all vantages’ traceroutes toward the target, drawn left→right, grouped into per-AS bubbles (a hop seen from several vantages is one shared bubble, so converging paths merge). It answers two questions per vantage — shown on each source bubble as echo ✓/⚠/✗ · trace ✓/✗: did the destination reply to ICMPv6 Echo (✓ honored, ⚠ replied but PTB not honored, ✗ no reply), and did the traceroute reach it. A line to the target is drawn only when that vantage got an echo reply — solid if the PTB was honored, dashed if not (reachable but a broken-PMTUD / RFC 4890 violation). The path depth still shows how far the traceroute itself got, and runs of unanswered (* *) hops collapse into one dashed “silent” bubble. Open full size ↗

• ● SRB host (SOX, Belgrade)
• ● DE host (Berlin)
• ● DE host (Düsseldorf)
• ● NL host (go6lab)
• ● ITA host (Karsolink)
• ● SLO host (6connect)
• ● SLO host (T-2)
• ── solid line = echo reply, PTB honored (clean reach)
• — — dashed line = echo reply but PTB not honored (RFC 4890 violation)
• no line = no echo reply (never reached)
• ◉ target: green = clean, amber = reachable-but-violation / unreachable
• ⚠ suspected drop AS
• ⋯ silent (unanswered) hops
• ● IXP hop

From SRB host (SOX, Belgrade)   openRFC 4890 ✗

filter likely at: (none) · min PMTU on path: 1500

Path (traceroute + mtr + PTR)

Rate-limited ICMPv6: hop 4, hop 5 (loss between 5% and 95% across mtr cycles - the router replies but only sometimes).

tracepath -6

 1?: [LOCALHOST]                        0.012ms pmtu 1500
 1:  _gateway                                              0.385ms 
 1:  _gateway                                              0.321ms 
 2:  sox-pn.sox.rs                                         0.418ms 
 3:  2001:7f8:1e:8::3d                                     0.588ms asymm  2 
 4:  ae8-930.RT.IRX.VIE.AT.retn.net                       12.749ms asymm  3 
 5:  RT.TH2.LON.UK.retn.net                               33.537ms asymm  6 
 6:  linx.edge.as62275.net                                63.321ms asymm  5 
 7:  no reply
 8:  fd00::10:89:9:4                                      58.204ms asymm  6 
 9:  no reply
10:  no reply
11:  no reply
12:  no reply
13:  no reply
14:  no reply
     Too many hops: pmtu 1500
     Resume: pmtu 1500 

From DE host (Berlin)   openRFC 4890 ✗

filter likely at: (none) · min PMTU on path: 1500

Path (traceroute + mtr + PTR)

tracepath -6

 1?: [LOCALHOST]                        0.029ms pmtu 1500
 1:  xe-0-0-13-178.gw01.ber01.as59645.net                  0.484ms 
 1:  xe-0-0-13-178.gw01.ber01.as59645.net                  0.530ms 
 2:  ae0-2453.cr10.ber01.lwlcom.net                        0.767ms 
 3:  ae0-150.cr10.fra01.lwlcom.net                        10.224ms asymm  7 
 4:  ae0-100.cr10.fra02.lwlcom.net                        10.311ms asymm  8 
 5:  ae0-10.cr10.fra06.lwlcom.net                         10.378ms asymm  7 
 6:  tbiss.1-ix.net                                       56.301ms asymm  7 
 7:  no reply
 8:  no reply
 9:  no reply
10:  no reply
11:  no reply
12:  no reply
13:  no reply
14:  no reply
     Too many hops: pmtu 1500
     Resume: pmtu 1500 

From DE host (Düsseldorf)   openRFC 4890 ✗

filter likely at: (none) · min PMTU on path: 1500

Path (traceroute + mtr + PTR)

tracepath -6

 1?: [LOCALHOST]                        0.027ms pmtu 1500
 1:  xe-0-0-12-142.gw01.dus01.as59645.net                  0.352ms 
 1:  xe-0-0-12-142.gw01.dus01.as59645.net                  0.248ms 
 2:  eth1-0-12-h5594.edge5-dus1.bb.wiit.network            1.222ms 
 3:  no reply
 4:  lag30.core3-dus1.bb.wiit.network                      0.450ms 
 5:  lag2.core1-dus-ix.bb.wiit.network                     0.647ms 
 6:  nhm-fra.nhm.it                                       20.102ms asymm  9 
 7:  no reply
 8:  no reply
 9:  no reply
10:  no reply
11:  no reply
12:  no reply
13:  no reply
14:  no reply
     Too many hops: pmtu 1500
     Resume: pmtu 1500 

From NL host (go6lab)   openRFC 4890 ✗

filter likely at: (none) · min PMTU on path: 1500

Path (traceroute + mtr + PTR)

Rate-limited ICMPv6: hop 3 (loss between 5% and 95% across mtr cycles - the router replies but only sometimes).

tracepath -6

 1?: [LOCALHOST]                        0.047ms pmtu 1500
 1:  2a00:8642:42::2                                       2.368ms 
 1:  2a00:8642:42::2                                       4.013ms 
 2:  no reply
 3:  speed-ix.he.net                                       6.626ms 
 4:  be2.core4.fra1.he.net                                11.460ms 
 5:  be10.core1.zrh2.he.net                               17.151ms 
 6:  be1.core1.mil2.he.net                                21.111ms 
 7:  no reply
 8:  no reply
 9:  no reply
10:  no reply
11:  no reply
12:  no reply
13:  no reply
14:  no reply
     Too many hops: pmtu 1500
     Resume: pmtu 1500 

From ITA host (Karsolink)   echo onlyRFC 4890 ✗

filter likely at: unknown · min PMTU on path: 1500

Path (traceroute + mtr + PTR)

Rate-limited ICMPv6: hop 3 (loss between 5% and 95% across mtr cycles - the router replies but only sometimes).

tracepath -6

 1?: [LOCALHOST]                        0.026ms pmtu 1500
 1:  karsolink-01.net.karsolink.com                        0.656ms 
 1:  karsolink-01.net.karsolink.com                        0.652ms 
 2:  2a12:d8c0:109f:121::a1                                2.975ms 
 3:  no reply
 4:  2001:7f8:b9::40:1                                    10.150ms 
 5:  no reply
 6:  no reply
 7:  no reply
 8:  no reply
 9:  no reply
10:  no reply
11:  no reply
12:  no reply
13:  no reply
14:  no reply
     Too many hops: pmtu 1500
     Resume: pmtu 1500 

From SLO host (6connect)   openRFC 4890 ✗

filter likely at: (none) · min PMTU on path: 1500

Path (traceroute + mtr + PTR)

tracepath -6

 1?: [LOCALHOST]                        0.021ms pmtu 9000
 1:  fw1-lju.6connect.com                                  0.556ms 
 1:  fw1-lju.6connect.com                                  0.870ms 
 2:  no reply
 3:  2a00:ee1:800:9::1                                     2.447ms 
 4:  2a00:ee0:1:10::2                                      1.393ms asymm  3 
 5:  2a00:ee0:1:15::2                                      1.901ms pmtu 1500
 5:  nhm-fra.nhm.it                                       27.077ms asymm 11 
 6:  no reply
 7:  no reply
 8:  no reply
 9:  no reply
10:  no reply
11:  no reply
12:  no reply
13:  no reply
14:  no reply
     Too many hops: pmtu 1500

From SLO host (T-2)   openRFC 4890 ✗

filter likely at: (none) · min PMTU on path: 1500

Path (traceroute + mtr + PTR)

tracepath -6

 1?: [LOCALHOST]                        0.014ms pmtu 1500
 1:  2a01:261:313:b814::1                                  0.908ms 
 2:  2a01:260:1::225                                       5.511ms 
 3:  2a01-260-1-1--9a.core6.t-2.net                        3.365ms 
 4:  2a01-260-1-1--38.core6.t-2.net                        2.820ms asymm  3 
 5:  port-channel1.core1.zag2.he.net                      10.071ms asymm  7 
 6:  port-channel1.core1.zag2.he.net                      10.572ms asymm  7 
 7:  nhm-v6.mix-it.net                                    17.364ms 
 8:  nhm.minap.it                                         18.108ms asymm  7 
 9:  no reply
10:  no reply
11:  no reply
12:  no reply
13:  no reply
14:  no reply
     Too many hops: pmtu 1500
     Resume: pmtu 1500