AS210715 - Nik RozmanRPKI ⚠ 1/2ASPA ✓

← back to summary

All countriesHomeState of IPv6TopologySIXAboutipv6.si ↗ Sparky

AS overview

Test target: 2a0f:9400:7718:100:443::80 · media.piskot.si · address space: unknown · prefixes announced: 2

prefix(es): 2a07:22c1:38::/48, 2a0f:9400:7718::/48

Targets & per-vantage-point probe results (6 target(s) across 3 vantage point(s))

Source codes (hover any badge for full description): CUR=curated · NS/SOA/MX=DNS records · SPF=SPF TXT · DRV=holder-derived (www, ns1, mail, gw, …) · ATL=RIPE Atlas · PDB=PeeringDB · WHOIS=RIPE whois · RDAP=RIPE RDAP · HIT=IPv6 Hitlist · RTR=in-prefix path hop (router) · PRB=static prefix probe · SYN=synthetic prefix::1 fallback

Target IP / hostnameSourceNL host (go6lab)ITA host (Karsolink)SLO host (6connect)
ping1500B:80:443reachedping1500B:80:443reachedping1500B:80:443reached
2a07:22c1:38:53::1
ns1.piskot.si
drv??refusedrefusedrefusedrefused
2a07:22c1:38:ffff::2hit??refusedrefusedrefusedrefused
2a0f:9400:7718:100:443::80
media.piskot.si
drv??-??-??-
2a0f:9400:7718:100::1hit??refusedrefusedrefusedrefused
2a0f:9400:7718:100:be24:11ff:feff:d54batl??refusedrefusedrefusedrefused
2a0f:9400:7718:53::1
ns2.piskot.si
drv??refusedrefusedrefusedrefused

RPKI & ASPA

1 of 2 prefix(es) covered by a valid ROA, 1 not-found.

PrefixRPKI stateReasonCovering VRP(s)
2a07:22c1:38::/48- not-foundno covering VRP
2a0f:9400:7718::/48✓ validmatched VRP (correct origin, length within maxLength)AS210715 /48 maxLen 48 (ripe)

ASPA: this AS has published an ASPA record listing 2 upstream provider(s) that are authorized to propagate routes from it: AS209533, AS212895. Routes from this AS that arrive via any other upstream are considered ASPA-invalid by validators that enforce ASPA.

Random-IP probe (yarrp) into the AS' prefixes

At least one router inside AS210715's announced prefix replied during the random-target probe. Hop(s): 2a07:22c1:38:ffff::2. These are candidate targets for direct testing.

ICMPv6 Type 2 (Packet Too Big) acceptance - active test

Type 2 active test inconclusive: no Echo Reply to 1300-byte probe.
method: ICMPv6 Echo + forged PTB, tested 2026-05-30T10:35:54Z

Failure detail — what to grep in your logs
vantageour sourceyour targetmethodresulttested (UTC)
go6lab2a00:8642:42::752a0f:9400:7718:100:443::80icmp6-echono_echo2026-05-30T10:35:54Z
karsolink2a12:d8c0:105a:9001::a1542a0f:9400:7718:100:443::80icmp6-echono_echo2026-05-30T10:45:31Z
odin2607:fae0:a000::422a0f:9400:7718:100:443::80icmp6-echono_echo2026-05-30T10:35:28Z

Attempt log (go6lab):

  1. icmp6-echono_echo: no Echo Reply to 1300-byte probe
  2. dns-tcpno_tcp: connect failed: [Errno 113] No route to host
  3. tlsno_tcp: TLS connect failed
  4. httpno_tcp: tcp/80 not open

Attempt log (karsolink):

  1. icmp6-echono_echo: no Echo Reply to 1300-byte probe
  2. dns-tcpno_tcp: connect failed: [Errno 113] No route to host
  3. tlsno_tcp: TLS connect failed
  4. httpno_tcp: tcp/80 not open

Attempt log (odin):

  1. icmp6-echono_echo: no Echo Reply to 1300-byte probe
  2. dns-tcpno_tcp: connect failed: [Errno 113] No route to host
  3. tlsno_tcp: TLS connect failed
  4. httpno_tcp: tcp/80 not open

To match the corresponding ICMPv6 packet on your side (host firewall, AS edge, or transit tap), look for our PTBs around the timestamps above:

sudo tcpdump -i any -n -e 'icmp6 and ip6[40] = 2 and (src host 2607:fae0:a000::42 or src host 2a00:8642:42::75 or src host 2a12:d8c0:105a:9001::a154)'

If you see our PTBs arriving but the destination's TCP/Echo flow does not shrink, the drop is in the destination kernel (cause 3 below). If you don't see them at all, drop is upstream of you (cause 2). If you only see them from one of our two source IPs, the drop is path-asymmetric — one transit on the asymmetric route is filtering, the other is not.

tracepath6 per-hop PMTU drilldown

For each target where Type 2 verdicts disagreed across vantages, tracepath -6 ran from every vantage to capture per-hop PMTU evolution along that vantage's actual forward path. A pmtu change entry on a hop means that hop's router generated a PTB and we observed the shrink; absence of any change combined with a not_honored verdict suggests a router somewhere downstream is silently dropping >MTU packets (an RFC 4890 violation) rather than sending a PTB.

Target 2a07:22c1:38:53::1

go6lab — verdict not_honored

verdict = not_honored; final pmtu = 1420

#hop IPpmtu change
1<span class='muted'>no reply</span>
22a00:8642:1000:f000::1
32a00:1ca8:1::194
42a03:3f40::10:41
52a0c:9a40:1071::1
62a0c:9a40:1072::1
72a0c:9a40:1070::18
8<span class='muted'>no reply</span>
92a07:22c1:38:53::1
karsolink — verdict inconclusive

verdict = inconclusive; final pmtu = 1420

#hop IPpmtu change
1<span class='muted'>no reply</span>
22a12:d8c0:109f:121::a1
32a12:d8c0:101f:6::1
4<span class='muted'>no reply</span>
52001:470:0:2dd::2
62001:470:0:5fb::1
72a0c:9a40:2b01::1
8<span class='muted'>no reply</span>
92a0c:9a40:2b00::18
102a0c:9a40:2b00::18
112a07:22c1:38:53::1
odin — verdict honored

verdict = honored; final pmtu = 1420

#hop IPpmtu change
1<span class='muted'>no reply</span>
22607:fae0:a000:2::2
32a03:a100:0:201:1::1
42001:470:1:5be::1
5<span class='muted'>no reply</span>
62001:470:0:2ea::2
7<span class='muted'>no reply</span>
82001:470:0:2dd::2
92001:470:0:5fb::1
102a0c:9a40:2b01::1
112a0c:9a40:100f:50b::2
122a0c:9a40:2b00::18
132a0c:9a40:2b00::18
142a07:22c1:38:53::1

Target 2a0f:9400:7718:53::1

go6lab — verdict not_honored

verdict = not_honored; final pmtu = 1420

#hop IPpmtu change
1<span class='muted'>no reply</span>
22a00:8642:1000:f000::1
32a00:1ca8:1::194
42a03:3f40::10:41
52a0c:9a40:1071::1
62a0c:9a40:1072::1
72a0c:9a40:1070::18
82a0c:9a40:1070::18
92a07:22c1:38:ffff::2
102a0f:9400:7718:53::1
karsolink — verdict not_honored

verdict = not_honored; final pmtu = 1420

#hop IPpmtu change
1<span class='muted'>no reply</span>
22a12:d8c0:109f:121::a1
32a12:d8c0:101f:6::1
4<span class='muted'>no reply</span>
52001:470:0:2dd::2
62001:470:0:5fb::1
72a0c:9a40:2b01::1
8<span class='muted'>no reply</span>
92a0c:9a40:2b00::18
102a0c:9a40:2b00::18
112a07:22c1:38:ffff::2
122a0f:9400:7718:53::1
odin — verdict honored

verdict = honored; final pmtu = 1420

#hop IPpmtu change
1<span class='muted'>no reply</span>
22607:fae0:a000:2::2
32a03:a100:0:201:1::1
42001:470:1:5be::1
5<span class='muted'>no reply</span>
62001:470:0:2ea::2
7<span class='muted'>no reply</span>
82001:470:0:2dd::2
92001:470:0:5fb::1
102a0c:9a40:2b01::1
112a0c:9a40:100f:50b::2
122a0c:9a40:2b00::18
132a0c:9a40:2b00::18
142a07:22c1:38:ffff::2
152a0f:9400:7718:53::1

Target 2a0f:9400:7718:100:be24:11ff:feff:d54b

go6lab — verdict not_honored

verdict = not_honored; final pmtu = 1420

#hop IPpmtu change
1<span class='muted'>no reply</span>
22a00:8642:1000:f000::1
32a00:1ca8:1::194
42a03:3f40::10:41
52a0c:9a40:1071::1
62a0c:9a40:1072::1
72a0c:9a40:1070::18
82a0c:9a40:1070::18
92a07:22c1:38:ffff::2
102a0f:9400:7718:100:be24:11ff:feff:d54b
karsolink — verdict not_honored

verdict = not_honored; final pmtu = 1420

#hop IPpmtu change
1<span class='muted'>no reply</span>
22a12:d8c0:109f:121::a1
32a12:d8c0:101f:6::1
4<span class='muted'>no reply</span>
52001:470:0:2dd::2
62001:470:0:5fb::1
72a0c:9a40:2b01::1
8<span class='muted'>no reply</span>
92a0c:9a40:2b00::18
102a0c:9a40:2b00::18
112a07:22c1:38:ffff::2
122a0f:9400:7718:100:be24:11ff:feff:d54b
odin — verdict honored

verdict = honored; final pmtu = 1420

#hop IPpmtu change
1<span class='muted'>no reply</span>
22607:fae0:a000:2::2
32a03:a100:0:201:1::1
42001:470:1:5be::1
5<span class='muted'>no reply</span>
62001:470:0:2ea::2
7<span class='muted'>no reply</span>
82001:470:0:2dd::2
92001:470:0:5fb::1
102a0c:9a40:2b01::1
112a0c:9a40:100f:50b::2
122a0c:9a40:2b00::18
132a0c:9a40:2b00::18
142a07:22c1:38:ffff::2
152a0f:9400:7718:100:be24:11ff:feff:d54b

Target 2a07:22c1:38:ffff::2

go6lab — verdict not_honored

verdict = not_honored; final pmtu = 1420

#hop IPpmtu change
1<span class='muted'>no reply</span>
22a00:8642:1000:f000::1
32a00:1ca8:1::194
42a03:3f40::10:41
52a0c:9a40:1071::1
62a0c:9a40:1072::1
72a0c:9a40:1070::18
82a0c:9a40:1070::18
92a07:22c1:38:ffff::2
karsolink — verdict not_honored

verdict = not_honored; final pmtu = 1420

#hop IPpmtu change
1<span class='muted'>no reply</span>
22a12:d8c0:109f:121::a1
32a12:d8c0:101f:6::1
4<span class='muted'>no reply</span>
52001:470:0:2dd::2
62001:470:0:5fb::1
72a0c:9a40:2b01::1
8<span class='muted'>no reply</span>
92a0c:9a40:2b00::18
102a0c:9a40:2b00::18
112a07:22c1:38:ffff::2
odin — verdict honored

verdict = honored; final pmtu = 1420

#hop IPpmtu change
1<span class='muted'>no reply</span>
22607:fae0:a000:2::2
32a03:a100:0:201:1::1
42001:470:1:5be::1
5<span class='muted'>no reply</span>
62001:470:0:2ea::2
7<span class='muted'>no reply</span>
82001:470:0:2dd::2
92001:470:0:5fb::1
102a0c:9a40:2b01::1
112a0c:9a40:100f:50b::2
122a0c:9a40:2b00::18
132a0c:9a40:2b00::18
142a07:22c1:38:ffff::2

Target 2a0f:9400:7718:100::1

go6lab — verdict not_honored

verdict = not_honored; final pmtu = 1420

#hop IPpmtu change
1<span class='muted'>no reply</span>
22a00:8642:1000:f000::1
32a00:1ca8:1::194
42a03:3f40::10:41
52a0c:9a40:1071::1
62a0c:9a40:1072::1
72a0c:9a40:1070::18
82a0c:9a40:1070::18
92a0f:9400:7718:100::1
karsolink — verdict not_honored

verdict = not_honored; final pmtu = 1420

#hop IPpmtu change
1<span class='muted'>no reply</span>
22a12:d8c0:109f:121::a1
32a12:d8c0:101f:6::1
4<span class='muted'>no reply</span>
52001:470:0:2dd::2
62001:470:0:5fb::1
72a0c:9a40:2b01::1
8<span class='muted'>no reply</span>
92a0c:9a40:2b00::18
102a0c:9a40:2b00::18
112a0f:9400:7718:100::1
odin — verdict honored

verdict = honored; final pmtu = 1420

#hop IPpmtu change
1<span class='muted'>no reply</span>
22607:fae0:a000:2::2
32a03:a100:0:201:1::1
42001:470:1:5be::1
5<span class='muted'>no reply</span>
62001:470:0:2ea::2
7<span class='muted'>no reply</span>
82001:470:0:2dd::2
92001:470:0:5fb::1
102a0c:9a40:2b01::1
112a0c:9a40:100f:50b::2
122a0c:9a40:2b00::18
132a0c:9a40:2b00::18
142a0f:9400:7718:100::1

From NL host (go6lab)   echo only

filter likely at: destination AS210715 (PISKOT-AS) · min PMTU on path: 1420

0/4
Echo small (56B) -
0/4
Echo 1500B (DF) -
no
Type 1 dest-unreach
-
TCP responds on

Path (traceroute + mtr + PTR)

#IP / PTRRTTmtr lossASAS holder
12a00:8642:42::30.8ms0%AS203993STEFFANN-DC-AS - S.J.M. Steffann, NL
2gw.friends.steffann.nl
2a00:8642:1000:f000::1
1.6ms0%*AS203993STEFFANN-DC-AS - S.J.M. Steffann, NL
32a00:1ca8:1::1942.7ms0%AS50673Serverius-as - Serverius Holding B.V., NL
42a03:3f40::10:412.4ms0%AS50673Serverius-as - Serverius Holding B.V., NL
52a0c:9a40:1071::14.0ms0%AS34927iFog-GmbH - iFog GmbH, CH
62a0c:9a40:1072::14.0ms0%AS34927iFog-GmbH - iFog GmbH, CH
7null.ams.ifog.nl
2a0c:9a40:1070::18
3.8ms0%AS34927iFog-GmbH - iFog GmbH, CH
8*---
9jesenice.wg1.lju.gw.v6.piskot.si
2a07:22c1:38:ffff::2
41.1ms0%AS210715PISKOT-AS - Nik Rozman, SI
10jesenice.wg1.lju.gw.v6.piskot.si
2a07:22c1:38:ffff::2
1089.3ms90%AS210715PISKOT-AS - Nik Rozman, SI

Rate-limited ICMPv6: hop 10 (loss between 5% and 95% across mtr cycles - the router replies but only sometimes).

tracepath -6

 1?: [LOCALHOST]                        0.044ms pmtu 1420
 1:  2a00:8642:42::3                                       1.600ms 
 1:  2a00:8642:42::3                                       1.413ms 
 2:  gw.friends.steffann.nl                                2.946ms 
 3:  2a00:1ca8:1::194                                      2.726ms 
 4:  2a03:3f40::10:41                                      2.696ms 
 5:  2a0c:9a40:1071::1                                     4.392ms asymm  3 
 6:  2a0c:9a40:1072::1                                     4.781ms asymm  4 
 7:  null.ams.ifog.nl                                      4.582ms asymm  5 
 8:  no reply
 9:  jesenice.wg1.lju.gw.v6.piskot.si                     41.178ms asymm  7 
10:  no reply
10:  jesenice.wg1.lju.gw.v6.piskot.si                    3131.523ms !H
     Resume: pmtu 1420 

From ITA host (Karsolink)   echo only

filter likely at: destination AS210715 (PISKOT-AS) · min PMTU on path: 1420

0/4
Echo small (56B) -
0/4
Echo 1500B (DF) -
no
Type 1 dest-unreach
-
TCP responds on

Path (traceroute + mtr + PTR)

#IP / PTRRTTmtr lossASAS holder
1karsolink-01.net.karsolink.com
2a12:d8c0:105a:9001::1
0.4ms0%*AS204471KARSOLINK - 2S Computers SRL, IT
2*-0%*-
3*-30%-
4*---
5be3.core2.mrs1.he.net
2001:470:0:2dd::2
18.7ms20%AS6939HURRICANE - Hurricane Electric LLC, US
6port-channel1.core1.bcn1.he.net
2001:470:0:5fb::1
22.7ms0%AS6939HURRICANE - Hurricane Electric LLC, US
72a0c:9a40:2b01::121.3ms0%AS34927iFog-GmbH - iFog GmbH, CH
8*---
92a0c:9a40:2b00::1831.8ms0%AS34927iFog-GmbH - iFog GmbH, CH
10*---
11jesenice.wg1.lju.gw.v6.piskot.si
2a07:22c1:38:ffff::2
85.8ms0%AS210715PISKOT-AS - Nik Rozman, SI
12*-80%-
13*---
14jesenice.wg1.lju.gw.v6.piskot.si
2a07:22c1:38:ffff::2
1160.3ms-AS210715PISKOT-AS - Nik Rozman, SI

Rate-limited ICMPv6: hop 3, hop 5, hop 12 (loss between 5% and 95% across mtr cycles - the router replies but only sometimes).

tracepath -6

 1?: [LOCALHOST]                        0.031ms pmtu 1500
 1:  karsolink-01.net.karsolink.com                        0.892ms 
 1:  karsolink-01.net.karsolink.com                        0.682ms 
 2:  2a12:d8c0:109f:121::a1                                0.857ms 
 3:  2a12:d8c0:101f:6::1                                  10.349ms 
 4:  no reply
 5:  be3.core2.mrs1.he.net                                17.858ms 
 6:  port-channel1.core1.bcn1.he.net                      22.886ms 
 7:  2a0c:9a40:2b01::1                                    21.814ms 
 8:  no reply
 9:  2a0c:9a40:2b00::18                                   32.785ms asymm  7 
10:  2a0c:9a40:2b00::18                                   32.992ms pmtu 1420
10:  no reply
11:  jesenice.wg1.lju.gw.v6.piskot.si                     62.010ms 
12:  jesenice.wg1.lju.gw.v6.piskot.si                    1969.272ms !H
     Resume: pmtu 1420 

From SLO host (6connect)   echo only

filter likely at: destination AS210715 (PISKOT-AS) · min PMTU on path: 1420

0/4
Echo small (56B) -
0/4
Echo 1500B (DF) -
no
Type 1 dest-unreach
-
TCP responds on

Path (traceroute + mtr + PTR)

#IP / PTRRTTmtr lossASAS holder
1fw1-lju.6connect.com
2607:fae0:a000::2
0.3ms0%*AS80386CONNECT - 6connect, Inc., US
2*---
3*-30%-
4e0-1.core1.lju1.he.net
2001:470:1:5be::1
1.9ms0%AS6939HURRICANE - Hurricane Electric LLC, US
5*---
6port-channel1.core1.zag2.he.net
2001:470:0:2ea::2
3.8ms0%AS6939HURRICANE - Hurricane Electric LLC, US
7*---
8be3.core2.mrs1.he.net
2001:470:0:2dd::2
23.6ms10%AS6939HURRICANE - Hurricane Electric LLC, US
9port-channel1.core1.bcn1.he.net
2001:470:0:5fb::1
25.4ms0%AS6939HURRICANE - Hurricane Electric LLC, US
102a0c:9a40:2b01::124.2ms0%AS34927iFog-GmbH - iFog GmbH, CH
112a0c:9a40:100f:50b::232.0ms0%-NA
122a0c:9a40:2b00::1831.8ms0%AS34927iFog-GmbH - iFog GmbH, CH
13*---
14jesenice.wg1.lju.gw.v6.piskot.si
2a07:22c1:38:ffff::2
58.8ms0%AS210715PISKOT-AS - Nik Rozman, SI
15jesenice.wg1.lju.gw.v6.piskot.si
2a07:22c1:38:ffff::2
1154.8ms70%AS210715PISKOT-AS - Nik Rozman, SI

Rate-limited ICMPv6: hop 3, hop 8, hop 15 (loss between 5% and 95% across mtr cycles - the router replies but only sometimes).

tracepath -6

 1?: [LOCALHOST]                        0.031ms pmtu 1500
 1:  fw1-lju.6connect.com                                  0.429ms 
 1:  fw1-lju.6connect.com                                  0.415ms 
 2:  no reply
 3:  2a03:a100:0:201:1::1                                  0.800ms 
 4:  e0-1.core1.lju1.he.net                                2.218ms 
 5:  no reply
 6:  port-channel1.core1.zag2.he.net                       4.167ms 
 7:  no reply
 8:  be3.core2.mrs1.he.net                                22.515ms 
 9:  port-channel1.core1.bcn1.he.net                      25.340ms 
10:  2a0c:9a40:2b01::1                                    24.684ms 
11:  2a0c:9a40:100f:50b::2                                31.550ms asymm  9 
12:  2a0c:9a40:2b00::18                                   33.363ms asymm 10 
13:  2a0c:9a40:2b00::18                                   31.743ms pmtu 1420
13:  no reply
14:  jesenice.wg1.lju.gw.v6.piskot.si                     63.689ms asymm 12 
15:  no reply
15:  jesenice.wg1.lju.gw.v6.piskot.si                    3127.179ms !H
     Resume: pmtu 1420