AS202988 - Žiga KraljRPKI -ASPA -

← back to summary

All countriesHomeState of IPv6TopologySIXAboutipv6.si ↗ Sparky

AS overview

Test target: 2a0f:85c1:e11::1 · static prefix probe · address space: unknown · prefixes announced: 1

prefix(es): 2a0f:85c1:e11::/48

Targets & per-vantage-point probe results (1 target(s) across 7 vantage point(s))

Source codes (hover any badge for full description): CUR=curated · NS/SOA/MX=DNS records · SPF=SPF TXT · DRV=holder-derived (www, ns1, mail, gw, …) · ATL=RIPE Atlas · PDB=PeeringDB · WHOIS=RIPE whois · RDAP=RIPE RDAP · HIT=IPv6 Hitlist · RTR=in-prefix path hop (router) · PRB=static prefix probe · SYN=synthetic prefix::1 fallback

Target IP / hostnameSourceSRB host (SOX, Belgrade)DE host (Berlin)DE host (Düsseldorf)NL host (go6lab)ITA host (Karsolink)SLO host (6connect)SLO host (T-2)
ping1500B:80:443reachedping1500B:80:443reachedping1500B:80:443reachedping1500B:80:443reachedping1500B:80:443reachedping1500B:80:443reachedping1500B:80:443reached
2a0f:85c1:e11::1prb??-??-??-??-??-??-??-

RPKI & ASPA

0 of 1 prefix(es) covered by a valid ROA, 1 not-found.

PrefixRPKI stateReasonCovering VRP(s)
2a0f:85c1:e11::/48- not-foundno covering VRP

Random-IP probe (yarrp) into the AS' prefixes

We probed 27 arbitrary IPv6 address(es) inside AS202988's announced prefix(es). No router inside the prefix responded. The deepest visible hop was 2a12:d8c0:109f:121::a1 at hop 24 - that router answers ICMPv6 Echo. This is not in AS202988's announced prefix; operationally it's the AS-edge / peering interface (often on a SIX peering address or an upstream's /127 link). The traceroute boundary is the AS edge: ICMPv6 Time-Exceeded responses from anything inside this AS are filtered.

ICMPv6 Type 2 (Packet Too Big) acceptance - active test

Type 2 active test inconclusive: no Echo Reply to 1300-byte probe.
method: ICMPv6 Echo + forged PTB, tested 2026-09-18T10:35:13Z

Failure detail - what to grep in your logs
vantageour sourceyour targetmethodresulttested (UTC)
belgrade2a09:ab81::912a0f:85c1:e11::1icmp6-echono_echo2026-09-18T10:35:13Z
berlin2a06:d1c1:10b::cccc2a0f:85c1:e11::1icmp6-echono_echo2026-09-18T10:35:08Z
duseldorf2a06:d1c1:10d::aaaa2a0f:85c1:e11::1icmp6-echono_echo2026-09-18T10:35:07Z
go6lab2a00:8642:42::752a0f:85c1:e11::1icmp6-echono_echo2026-09-18T10:35:39Z
karsolink2a12:d8c0:105a:9001::a1542a0f:85c1:e11::1icmp6-echono_echo2026-09-18T10:35:11Z
odin2607:fae0:a000::422a0f:85c1:e11::1icmp6-echono_echo2026-09-18T10:35:03Z
t22a01:261:313:b814:2a0:98ff:fe5b:13e42a0f:85c1:e11::1icmp6-echono_echo2026-09-18T10:35:07Z

Attempt log (belgrade):

  1. icmp6-echono_echo: no Echo Reply to 1300-byte probe
  2. dns-tcpno_tcp: connect failed: timed out
  3. tlsno_tcp: TLS connect failed
  4. httpno_tcp: tcp/80 not open

Attempt log (berlin):

  1. icmp6-echono_echo: no Echo Reply to 1300-byte probe
  2. dns-tcpno_tcp: connect failed: [Errno 101] Network is unreachable
  3. tlsno_tcp: TLS connect failed
  4. httpno_tcp: tcp/80 not open

Attempt log (duseldorf):

  1. icmp6-echono_echo: no Echo Reply to 1300-byte probe
  2. dns-tcpno_tcp: connect failed: [Errno 101] Network is unreachable
  3. tlsno_tcp: TLS connect failed
  4. httpno_tcp: tcp/80 not open

Attempt log (go6lab):

  1. icmp6-echono_echo: no Echo Reply to 1300-byte probe
  2. dns-tcpno_tcp: connect failed: [Errno 101] Network is unreachable
  3. tlsno_tcp: TLS connect failed
  4. httpno_tcp: tcp/80 not open

Attempt log (karsolink):

  1. icmp6-echono_echo: no Echo Reply to 1300-byte probe
  2. dns-tcpno_tcp: connect failed: [Errno 101] Network is unreachable
  3. tlsno_tcp: TLS connect failed
  4. httpno_tcp: tcp/80 not open

Attempt log (odin):

  1. icmp6-echono_echo: no Echo Reply to 1300-byte probe
  2. dns-tcpno_tcp: connect failed: [Errno 101] Network is unreachable
  3. tlsno_tcp: TLS connect failed
  4. httpno_tcp: tcp/80 not open

Attempt log (t2):

  1. icmp6-echono_echo: no Echo Reply to 1300-byte probe
  2. dns-tcpno_tcp: connect failed: timed out
  3. tlsno_tcp: TLS connect failed
  4. httpno_tcp: tcp/80 not open

To match the corresponding ICMPv6 packet on your side (host firewall, AS edge, or transit tap), look for our PTBs around the timestamps above:

sudo tcpdump -i any -n -e 'icmp6 and ip6[40] = 2 and (src host 2607:fae0:a000::42 or src host 2a00:8642:42::75 or src host 2a01:261:313:b814:2a0:98ff:fe5b:13e4 or src host 2a06:d1c1:10b::cccc or src host 2a06:d1c1:10d::aaaa or src host 2a09:ab81::91 or src host 2a12:d8c0:105a:9001::a154)'

If you see our PTBs arriving but the destination's TCP/Echo flow does not shrink, the drop is in the destination kernel (cause 3 below). If you don't see them at all, drop is upstream of you (cause 2). If you only see them from some of our source IPs but not others, the drop is path-asymmetric - at least one transit on the differing route is filtering.

Multi-vantage path map

Every hop of all vantages’ traceroutes toward the target, drawn left→right, grouped into per-AS bubbles (a hop seen from several vantages is one shared bubble, so converging paths merge). It answers two questions per vantage — shown on each source bubble as echo ✓/⚠/✗ · trace ✓/✗: did the destination reply to ICMPv6 Echo (✓ honored, ⚠ replied but PTB not honored, ✗ no reply), and did the traceroute reach it. A line to the target is drawn only when that vantage got an echo reply — solid if the PTB was honored, dashed if not (reachable but a broken-PMTUD / RFC 4890 violation). The path depth still shows how far the traceroute itself got, and runs of unanswered (* *) hops collapse into one dashed “silent” bubble. Open full size ↗

multi-vantage path diagram for AS202988

From SRB host (SOX, Belgrade)   all blocked

filter likely at: past AS13004 (SOX) · min PMTU on path: 1500

0/4
Echo small (56B) -
0/4
Echo 1500B (DF) -
no
Type 1 dest-unreach
-
TCP responds on

Path (traceroute + mtr + PTR)

#IP / PTRRTTmtr lossASAS holder
12a09:ab81::10.3ms0%*AS60733PERKE-NET - ZORAN PEROVIC trading as Agencija Perke.NET, RS
2sox-pn.sox.rs
2001:7f8:1e:8::3a
0.2ms0%AS13004SOX - Serbian Open Exchange DOO, RS
3*---
4*---
5*---
6*---
7*---
8*---
9*---
10*---
11*---
12*---
13*---
14*---
15*---
16*---
17*---
18*---
19*---
20*---
21*---
22*---
23*---
24*---

tracepath -6

 1?: [LOCALHOST]                        0.024ms pmtu 1500
 1:  _gateway                                              0.411ms 
 1:  _gateway                                              0.352ms 
 2:  sox-pn.sox.rs                                         1.050ms 
 3:  no reply
 4:  no reply
 5:  no reply
 6:  no reply
 7:  no reply
 8:  no reply
 9:  no reply
10:  no reply
11:  no reply
12:  no reply
13:  no reply
14:  no reply
15:  no reply
16:  no reply
17:  no reply
18:  no reply
19:  no reply
20:  no reply
21:  no reply
22:  no reply
23:  no reply
24:  no reply
     Too many hops: pmtu 1500
     Resume: pmtu 1500 

From DE host (Berlin)   all blocked

filter likely at: before path completes · min PMTU on path: 1500

0/4
Echo small (56B) -
0/4
Echo 1500B (DF) -
no
Type 1 dest-unreach
-
TCP responds on

Path (traceroute + mtr + PTR)

#IP / PTRRTTmtr lossASAS holder
1*---
2*---
3*---
4*---
5*---
6*---
7*-0%*-
8*---
9*---
10*---
11*---
12*---
13*---
14*---
15*---
16*---
17*---
18*---
19*---
20*---
21*---
22*---
23*---
24*---

tracepath -6

 1?: [LOCALHOST]                        0.021ms pmtu 1500
 1:  xe-0-0-13-178.gw01.ber01.as59645.net                  0.379ms !N
     Resume: pmtu 1500 

From DE host (Düsseldorf)   all blocked

filter likely at: before path completes · min PMTU on path: 1500

0/4
Echo small (56B) -
0/4
Echo 1500B (DF) -
no
Type 1 dest-unreach
-
TCP responds on

Path (traceroute + mtr + PTR)

#IP / PTRRTTmtr lossASAS holder
1*---
2*---
3*---
4*---
5*---
6*---
7*-0%*-
8*---
9*---
10*---
11*---
12*---
13*---
14*---
15*---
16*---
17*---
18*---
19*---
20*---
21*---
22*---
23*---
24*---

tracepath -6

 1?: [LOCALHOST]                        0.022ms pmtu 1500
 1:  xe-0-0-12-142.gw01.dus01.as59645.net                  0.373ms !N
 1:  xe-0-0-12-142.gw01.dus01.as59645.net                  0.215ms !N
     Resume: pmtu 1500 

From NL host (go6lab)   all blocked

filter likely at: past AS174 (COGENT-174) · min PMTU on path: 1500

0/4
Echo small (56B) -
0/4
Echo 1500B (DF) -
no
Type 1 dest-unreach
-
TCP responds on

Path (traceroute + mtr + PTR)

#IP / PTRRTTmtr lossASAS holder
12a00:8642:42::22.6ms0%AS203993GNA-DC1-AS - S.J.M. Steffann, NL
2*-0%*-
32a00:1ca8:1::1943.5ms0%AS50673Serverius-as - Serverius Holding B.V., NL
42a03:3f40::10:412.9ms0%AS50673Serverius-as - Serverius Holding B.V., NL
52001:978:2:40::3:110.4ms0%AS174COGENT-174 - Cogent Communications, LLC, US

tracepath -6

 1?: [LOCALHOST]                        0.040ms pmtu 1500
 1:  ???                                                   3.140ms 
 1:  ???                                                   1.689ms 
 2:  gw.friends.steffann.nl                                6.925ms 
 3:  2a00:1ca8:1::194                                      2.925ms 
 4:  2a03:3f40::10:41                                      3.179ms 
 5:  2001:978:2:40::3:1                                    7.262ms !N
     Resume: pmtu 1500 

From ITA host (Karsolink)   all blocked

filter likely at: past AS204471 (KARSOLINK) · min PMTU on path: 1500

0/4
Echo small (56B) -
0/4
Echo 1500B (DF) -
no
Type 1 dest-unreach
-
TCP responds on

Path (traceroute + mtr + PTR)

#IP / PTRRTTmtr lossASAS holder
1*-0%*-
2*---
3*-0%*-
4*---
5*---
6*---
7*---
8*---
92a12:d8c0:109f:121::a10.4ms-AS204471KARSOLINK - 2S Computers SRL, IT

tracepath -6

 1?: [LOCALHOST]                        0.030ms pmtu 1500
 1:  karsolink-01.net.karsolink.com                        0.471ms 
 2:  no reply
 3:  2a12:d8c0:109f:121::a1                                0.478ms !N
     Resume: pmtu 1500 

From SLO host (6connect)   all blocked

filter likely at: past AS8038 (6CONNECT) · min PMTU on path: 9000

0/4
Echo small (56B) -
0/4
Echo 1500B (DF) -
no
Type 1 dest-unreach
-
TCP responds on

Path (traceroute + mtr + PTR)

#IP / PTRRTTmtr lossASAS holder
1fw1-lju.6connect.com
2607:fae0:a000::2
1.7ms0%*AS80386CONNECT - 6connect, Inc., US
2*-0%*-
3*---
4*---
5*---
6*---
7*---
8*---
9*---
10ccr-to-fw-ccr1-gw-lju.6connect.com
2607:fae0:a000:2::2
1.1ms-AS80386CONNECT - 6connect, Inc., US

tracepath -6

 1?: [LOCALHOST]                        0.022ms pmtu 9000
 1:  fw1-lju.6connect.com                                  3.161ms 
 1:  fw1-lju.6connect.com                                  0.637ms 
 2:  no reply
 3:  no reply
 4:  no reply
 5:  no reply
 6:  no reply
 7:  no reply
 8:  no reply
 9:  ccr-to-fw-ccr1-gw-lju.6connect.com                    0.962ms !N
     Resume: pmtu 9000 

From SLO host (T-2)   all blocked

filter likely at: past AS34779 (T-2-AS) · min PMTU on path: 1500

0/4
Echo small (56B) -
0/4
Echo 1500B (DF) -
no
Type 1 dest-unreach
-
TCP responds on

Path (traceroute + mtr + PTR)

#IP / PTRRTTmtr lossASAS holder
1*-0%*-
22a01:260:1::2252.1ms0%*AS34779T-2-AS - T-2, d.o.o., SI
3*---
4*---
5*---
6*---
7*---
8*---
9*---
10*---
11*---
12*---
13*---
14*---
15*---
16*---
17*---
18*---
19*---
20*---
21*---
22*---
23*---
24*---

tracepath -6

 1?: [LOCALHOST]                        0.026ms pmtu 1500
 1:  2a01:261:313:b814::1                                  0.909ms 
 1:  2a01:261:313:b814::1                                  0.877ms 
 2:  2a01:260:1::225                                       2.911ms 
 3:  no reply
 4:  no reply
 5:  no reply
 6:  no reply
 7:  no reply
 8:  no reply
 9:  no reply
10:  no reply
11:  no reply
12:  no reply
13:  no reply
14:  no reply
15:  no reply
16:  no reply
17:  no reply
18:  no reply
19:  no reply
20:  no reply
21:  no reply
22:  no reply
23:  no reply
24:  no reply
     Too many hops: pmtu 1500
     Resume: pmtu 1500