AS205211 - Tilen BarbiricPARFC 4890 ✓RPKI ✓ 1/1ASPA -

← back to summary

All countriesHomeState of IPv6TopologySIXAboutipv6.si ↗ Sparky

AS overview

Test target: 2a0c:b641:4c0:: · via IPv6 Hitlist (responsive) · address space: PA · prefixes announced: 1

prefix(es): 2a0c:b641:4c0::/44

Targets & per-vantage-point probe results (2 target(s) across 3 vantage point(s))

Source codes (hover any badge for full description): CUR=curated · NS/SOA/MX=DNS records · SPF=SPF TXT · DRV=holder-derived (www, ns1, mail, gw, …) · ATL=RIPE Atlas · PDB=PeeringDB · WHOIS=RIPE whois · RDAP=RIPE RDAP · HIT=IPv6 Hitlist · RTR=in-prefix path hop (router) · PRB=static prefix probe · SYN=synthetic prefix::1 fallback

Target IP / hostnameSourceNL host (go6lab)ITA host (Karsolink)SLO host (6connect)
ping1500B:80:443reachedping1500B:80:443reachedping1500B:80:443reached
2a0c:b641:4c0:1::3rtr??????
2a0c:b641:4c0::hit??-??-??-

RPKI & ASPA

1 of 1 prefix(es) covered by a valid ROA.

PrefixRPKI stateReasonCovering VRP(s)
2a0c:b641:4c0::/44✓ validmatched VRP (correct origin, length within maxLength)AS205211 /44 maxLen 128 (ripe)

Random-IP probe (yarrp) into the AS' prefixes

At least one router inside AS205211's announced prefix replied during the random-target probe. Hop(s): 2a0c:b641:4c0::. These are candidate targets for direct testing.

ICMPv6 Type 2 (Packet Too Big) acceptance - active test

Vantage points disagree about Type 2 acceptance - transit ASes on one path may be filtering Type 2 even though the destination's stack accepts it on another path:

Why they disagree - measurement artifact: One vantage's probe didn't generate enough data to detect segment shrinkage (natural reply too small, or no second response). The other vantage's verdict is the meaningful one.

Failure detail — what to grep in your logs
vantageour sourceyour targetmethodresulttested (UTC)
go6lab2a00:8642:42::752a0c:b641:4c0::icmp6-echohonored2026-05-30T10:35:47Z
karsolink2a12:d8c0:105a:9001::a1542a0c:b641:4c0::icmp6-echoinconclusive2026-05-30T10:45:25Z
odin2607:fae0:a000::422a0c:b641:4c0::icmp6-echohonored2026-05-30T10:35:21Z

Attempt log (go6lab):

  1. icmp6-echohonored (size_before=1460, size_after=None)
  2. dns-tcpno_tcp: connect failed: timed out
  3. tlsno_tcp: TLS connect failed
  4. httpno_tcp: tcp/80 not open

Attempt log (karsolink):

  1. icmp6-echoinconclusive (size_before=1460, size_after=None): no Echo Reply after PTB (probe 1500B)
  2. dns-tcpno_tcp: connect failed: timed out
  3. tlsno_tcp: TLS connect failed
  4. httpno_tcp: tcp/80 not open

Attempt log (odin):

  1. icmp6-echohonored (size_before=1360, size_after=None): natural Echo Reply at 1400B was already split into IPv6 fragments without our PTB intervention -- the destination's stack has a cached path MTU below 1400B from a previously-honored ICMPv6 Type 2, which is itself evidence that this destination honors PTB on this path.
  2. dns-tcpno_tcp: connect failed: timed out
  3. tlsno_tcp: TLS connect failed
  4. httpno_tcp: tcp/80 not open

To match the corresponding ICMPv6 packet on your side (host firewall, AS edge, or transit tap), look for our PTBs around the timestamps above:

sudo tcpdump -i any -n -e 'icmp6 and ip6[40] = 2 and (src host 2607:fae0:a000::42 or src host 2a00:8642:42::75 or src host 2a12:d8c0:105a:9001::a154)'

If you see our PTBs arriving but the destination's TCP/Echo flow does not shrink, the drop is in the destination kernel (cause 3 below). If you don't see them at all, drop is upstream of you (cause 2). If you only see them from one of our two source IPs, the drop is path-asymmetric — one transit on the asymmetric route is filtering, the other is not.

Where the path divergence is

Per-vantage probe + verdict (headline):

Full per-method matrix (all four methods run at each vantage):

vantageicmp6-echodns-tcptlshttp
go6labhonoredno_tcpno_tcpno_tcp
karsolinkinconclusiveno_tcpno_tcpno_tcp
odinhonoredno_tcpno_tcpno_tcp

✓ All vantages agree on method(s): icmp6-echo — the headline-method spread above is dispatcher noise, not a real Type 2 disagreement.

These vantage-level disagreements are rooted somewhere in the forward paths. Joining each per-vantage traceroute against the IP→AS lookup from our global yarrp mesh, the first hop where the paths land in different ASes is the most likely site of the offending filter / unreachable AS / Type 2 drop.

Suspect transit ASes (ranked by how often they appear at the divergence point on the path of the worse-classifying vantage): AS24961, AS34872, AS50673.

Diagnosis is path-level, not packet-level: it tells you which transit AS is the prime suspect, not exactly which firewall rule is to blame. Use the tracepath6 output below (when available) for per-hop PMTU evidence on the same path.

Diagnostic interpretation

An operator-targeted diagnostic interpretation can be generated for this AS on demand. The pipeline holds the raw verdicts and the per-hop walk; an AI pass synthesises where to start looking. Click the button below to run it.

Per-hop PTB acceptance walk

From the local vantage, we walk the forward path hop-by-hop, sending each hop a 1500-byte ICMPv6 Echo, then a forged PTB (MTU=1280) sourced from us, then another 1500-byte Echo. If the second reply arrives fragmented or smaller, that hop honoured the PTB. If unchanged, it didn't. The first ✗ in an otherwise-✓ path is the most likely filter location. Cross-country aggregation: see the global PTB filter atlas for transit ASes ranked by filter rate across all measurements.

First break at hop 3: AS5603 (SIOL-NET - Telekom Slovenije, d.d., SI) -- this is the most likely site of the offending PTB filter. Hop IP: 2a00:ee1:800:9::1.

#hop IPASHolderPTB acceptance
12607:fae0:a000::2AS80386CONNECT - 6connect, Inc., US- skipped (CoPP)
2*-- (no IP)
32a00:ee1:800:9::1AS5603SIOL-NET - Telekom Slovenije, d.d., SI✗ not_honored
42a00:ee0:1:15::2AS5603SIOL-NET - Telekom Slovenije, d.d., SI✗ not_honored
52a11:4142:2002-- (invalid IP)
62a11:4140::1eAS5405INTERDOTLINK - Inter.link GmbH, DE✓ honored
72a11:4140::20AS5405INTERDOTLINK - Inter.link GmbH, DE✓ honored
82a11:4140::1fAS5405INTERDOTLINK - Inter.link GmbH, DE✓ honored
92a11:4140::1cAS5405INTERDOTLINK - Inter.link GmbH, DE✓ honored
102001:7f8:44::151d:0:1-NA? no_response
112001:7f8:44::8838:0:1-NA? no_response
122a0c:b640:ffff:100:120:7:128:134AS34872Servperso_Systems - Sarah Rossius tradin? no_response
13*-- (no IP)
14*-- (no IP)
15*-- (no IP)
16*-- (no IP)
17*-- (no IP)
18*-- (no IP)
19*-- (no IP)
20*-- (no IP)
21*-- (no IP)
22*-- (no IP)
23*-- (no IP)
24*-- (no IP)

Tests host-mode PTB acceptance (PTBs aimed at the hop itself). A router that honours PTBs to itself can still be filtering PTBs transiting through it; this is one indicator, not proof of full PTB transparency. Hops in CoPP-rate-limit ranges are skipped to avoid false signals.

From NL host (go6lab)   openRFC 4890 ✓

filter likely at: (none) · min PMTU on path: 1500

4/4
Echo small (56B) 8.8ms
4/4
Echo 1500B (DF) 8.3ms
no
Type 1 dest-unreach
-
TCP responds on

Path (traceroute + mtr + PTR)

#IP / PTRRTTmtr lossASAS holder
12a00:8642:42::31.5ms0%AS203993STEFFANN-DC-AS - S.J.M. Steffann, NL
2*-0%*-
32a00:1ca8:1::1942.7ms0%AS50673Serverius-as - Serverius Holding B.V., NL
42a03:3f40::10:333.5ms0%AS50673Serverius-as - Serverius Holding B.V., NL
5po15-h437c.core1-ams-ni.bb.as24961.net
2001:7f8:1::a502:4961:1
4.0ms0%-NA
6lag15.core2-dus3.bb.wiit.network
2001:4ba0:ffe9:10::1
7.3ms0%AS24961MYLOC-AS - WIIT AG, DE
7lag2-h3679.edge3-dus3.bb.wiit.network
2001:4ba0:ffe9:7a::2
8.7ms0%AS24961MYLOC-AS - WIIT AG, DE
82001:4ba0:dead:b051::37.4ms0%AS24961MYLOC-AS - WIIT AG, DE
92a0c-b640-ffff-100-120-7-128-134.edge.isp.servpersosystems.net
2a0c:b640:ffff:100:120:7:128:134
7.7ms0%AS34872Servperso_Systems - Sarah Rossius trading as Servperso Systems, BE
10*-0%-
11*---
12*---
13*---
14*---
15*---
16*---
17*---
18*---
19*---
20*---
21*---
22*---
23*---
24*---

tracepath -6

 1?: [LOCALHOST]                        0.029ms pmtu 1500
 1:  2a00:8642:42::3                                       1.486ms 
 1:  2a00:8642:42::3                                       1.427ms 
 2:  gw.friends.steffann.nl                                2.405ms 
 3:  2a00:1ca8:1::194                                      2.755ms 
 4:  2a03:3f40::10:33                                      4.714ms 
 5:  po15-h437c.core1-ams-ni.bb.as24961.net                4.900ms asymm  4 
 6:  lag15.core2-dus3.bb.wiit.network                      7.744ms asymm  5 
 7:  lag2-h3679.edge3-dus3.bb.wiit.network                10.872ms asymm  6 
 8:  2001:4ba0:dead:b051::3                                8.032ms asymm  7 
 9:  2a0c-b640-ffff-100-120-7-128-134.edge.isp.servpersosystems.net   8.641ms asymm  8 
10:  no reply
11:  no reply
12:  no reply
13:  no reply
14:  no reply
15:  no reply
16:  no reply
17:  no reply
18:  no reply
19:  no reply
20:  no reply
21:  no reply
22:  no reply
23:  no reply
24:  no reply
     Too many hops: pmtu 1500
     Resume: pmtu 1500 

From ITA host (Karsolink)   open

filter likely at: (none) · min PMTU on path: 1500

4/4
Echo small (56B) 23.5ms
4/4
Echo 1500B (DF) 23.4ms
no
Type 1 dest-unreach
-
TCP responds on

Path (traceroute + mtr + PTR)

#IP / PTRRTTmtr lossASAS holder
1*-0%*-
22a12:d8c0:109f:121::a10.4ms0%*AS204471KARSOLINK - 2S Computers SRL, IT
32a12:d8c0:101f:6::110.0ms10%AS204471KARSOLINK - 2S Computers SRL, IT
4myloc.minap.it
2001:7f8:c5::a502:4961:1
10.2ms0%-NA
52001:4ba0:ffe9:c613.9ms0%-
6lag0-vl1017.core1-fra-eq5.bb.wiit.network
2001:4ba0:ffe9:b7::1
18.9ms0%AS24961MYLOC-AS - WIIT AG, DE
7lag0-vl7.core1-fra-ix.bb.wiit.network
2001:4ba0:ffe9:6d::2
19.2ms0%AS24961MYLOC-AS - WIIT AG, DE
8lag26.core3-dus1.bb.wiit.network
2001:4ba0:ffe9:8a::1
22.8ms0%AS24961MYLOC-AS - WIIT AG, DE
9lag2.core2-dus3.bb.wiit.network
2001:4ba0:ffe9::1
22.5ms0%AS24961MYLOC-AS - WIIT AG, DE
10lag2-h3679.edge3-dus3.bb.wiit.network
2001:4ba0:ffe9:7a::2
25.0ms0%AS24961MYLOC-AS - WIIT AG, DE
112001:4ba0:dead:b051::323.0ms0%AS24961MYLOC-AS - WIIT AG, DE
122a0c-b640-ffff-100-120-7-128-134.edge.isp.servpersosystems.net
2a0c:b640:ffff:100:120:7:128:134
22.8ms0%AS34872Servperso_Systems - Sarah Rossius trading as Servperso Systems, BE
13*-0%-
14*---
15*---
16*---
17*---
18*---
19*---
20*---
21*---
22*---
23*---
24*---

Rate-limited ICMPv6: hop 3 (loss between 5% and 95% across mtr cycles - the router replies but only sometimes).

tracepath -6

 1?: [LOCALHOST]                        0.033ms pmtu 1500
 1:  karsolink-01.net.karsolink.com                        0.638ms 
 1:  karsolink-01.net.karsolink.com                        0.852ms 
 2:  no reply
 3:  2a12:d8c0:101f:6::1                                  10.568ms 
 4:  myloc.minap.it                                       10.714ms 
 5:  lag0-vl1002.core1-lpg-green-lu2.bb.wiit.network      15.064ms 
 6:  lag0-vl1017.core1-fra-eq5.bb.wiit.network            19.702ms 
 7:  lag0-vl7.core1-fra-ix.bb.wiit.network                19.642ms 
 8:  lag26.core3-dus1.bb.wiit.network                     23.499ms 
 9:  lag2.core2-dus3.bb.wiit.network                      23.346ms 
10:  lag2-h3679.edge3-dus3.bb.wiit.network                25.949ms 
11:  2001:4ba0:dead:b051::3                               23.708ms asymm  9 
12:  2a0c-b640-ffff-100-120-7-128-134.edge.isp.servpersosystems.net  23.476ms 
13:  no reply
14:  no reply
15:  no reply
16:  no reply
17:  no reply
18:  no reply
19:  no reply
20:  no reply
21:  no reply
22:  no reply
23:  no reply
24:  no reply
     Too many hops: pmtu 1500
     Resume: pmtu 1500 

From SLO host (6connect)   openRFC 4890 ✓

filter likely at: (none) · min PMTU on path: 1500

4/4
Echo small (56B) 21.6ms
4/4
Echo 1500B (DF) 21.6ms
no
Type 1 dest-unreach
-
TCP responds on

Path (traceroute + mtr + PTR)

#IP / PTRRTTmtr lossASAS holder
1fw1-lju.6connect.com
2607:fae0:a000::2
0.4ms0%*AS80386CONNECT - 6connect, Inc., US
2*---
32a00:ee1:800:9::11.8ms0%AS5603SIOL-NET - Telekom Slovenije, d.d., SI
42a00:ee0:1:15::21.0ms0%AS5603SIOL-NET - Telekom Slovenije, d.d., SI
52a11:4142:20021.0ms0%-
6r2-vie1-at.as5405.net
2a11:4140::1e
13.0ms0%AS5405INTERDOTLINK - Inter.link GmbH, DE
7r2-vie2-at.as5405.net
2a11:4140::20
13.1ms0%AS5405INTERDOTLINK - Inter.link GmbH, DE
8r1-vie2-at.as5405.net
2a11:4140::1f
12.9ms0%AS5405INTERDOTLINK - Inter.link GmbH, DE
9r1-muc1-de.as5405.net
2a11:4140::1c
12.7ms0%AS5405INTERDOTLINK - Inter.link GmbH, DE
102001:7f8:44::151d:0:112.8ms0%-NA
11muc.as34872-decix.servperso.net
2001:7f8:44::8838:0:1
21.3ms0%-NA
122a0c-b640-ffff-100-120-7-128-134.edge.isp.servpersosystems.net
2a0c:b640:ffff:100:120:7:128:134
21.5ms0%AS34872Servperso_Systems - Sarah Rossius trading as Servperso Systems, BE
13*-0%-
14*---
15*---
16*---
17*---
18*---
19*---
20*---
21*---
22*---
23*---
24*---

tracepath -6

 1?: [LOCALHOST]                        0.022ms pmtu 1500
 1:  fw1-lju.6connect.com                                  0.421ms 
 1:  fw1-lju.6connect.com                                  0.398ms 
 2:  no reply
 3:  2a00:ee1:800:9::1                                     2.147ms 
 4:  2a00:ee0:1:15::2                                      0.985ms asymm  3 
 5:  2a11:4142:2002::                                      0.942ms asymm  6 
 6:  r2-vie1-at.as5405.net                                12.680ms asymm 14 
 7:  r2-vie2-at.as5405.net                                12.639ms asymm 14 
 8:  r1-vie2-at.as5405.net                                12.675ms asymm 13 
 9:  r1-muc1-de.as5405.net                                12.894ms asymm 12 
10:  2001:7f8:44::151d:0:1                                12.631ms 
11:  muc.as34872-decix.servperso.net                      21.432ms asymm  8 
12:  2a0c-b640-ffff-100-120-7-128-134.edge.isp.servpersosystems.net  21.650ms asymm 10 
13:  no reply
14:  no reply
15:  no reply
16:  no reply
17:  no reply
18:  no reply
19:  no reply
20:  no reply
21:  no reply
22:  no reply
23:  no reply
24:  no reply
     Too many hops: pmtu 1500
     Resume: pmtu 1500