AS41427 - DatacenterPIRFC 4890 ✓RPKI -ASPA -

← back to summary

All countriesHomeState of IPv6TopologySIXAboutipv6.si ↗ Sparky

AS overview

Test target: 2001:678:cc8:2:8000:: · via IPv6 Hitlist (responsive) · address space: PI · prefixes announced: 1

prefix(es): 2001:678:cc8::/48

Targets & per-vantage-point probe results (8 target(s) across 7 vantage point(s))

Source codes (hover any badge for full description): CUR=curated · NS/SOA/MX=DNS records · SPF=SPF TXT · DRV=holder-derived (www, ns1, mail, gw, …) · ATL=RIPE Atlas · PDB=PeeringDB · WHOIS=RIPE whois · RDAP=RIPE RDAP · HIT=IPv6 Hitlist · RTR=in-prefix path hop (router) · PRB=static prefix probe · SYN=synthetic prefix::1 fallback

Target IP / hostnameSourceSRB host (SOX, Belgrade)DE host (Berlin)DE host (Düsseldorf)NL host (go6lab)ITA host (Karsolink)SLO host (6connect)SLO host (T-2)
ping1500B:80:443reachedping1500B:80:443reachedping1500B:80:443reachedping1500B:80:443reachedping1500B:80:443reachedping1500B:80:443reachedping1500B:80:443reached
2001:678:cc8:2:8000::hitopenopen-openopen-openopen-openopen-openopen-openopen-openopen-
2001:678:cc8:2:8000:c001:aaaa:aaaahitopenopenopenopenopenopenopenopenopenopenopenopenopenopen
2001:678:cc8:2:8000:c001:c0ff:eehitopenopenopenopenopenopenopenopenopenopenopenopenopenopen
2001:678:cc8:3::1hitrefusedrefusedrefusedrefusedrefusedrefused??refusedrefusedrefusedrefusedrefusedrefused
2001:678:cc8:3::2hit??-??-??-??-??-??-??-
2001:678:cc8::1prbrefusedrefusedrefusedrefusedrefusedrefused??refusedrefused-refusedrefusedrefusedrefused
2001:678:cc8:ffff::5hitrefusedrefusedrefusedrefusedrefusedrefused??refusedrefusedrefusedrefusedrefusedrefused
2001:678:cc8:ffff::6hitrefusedrefusedrefusedrefusedrefusedrefused??refusedrefused-refusedrefusedrefusedrefused

SIX peering

SIX member - open peering, peering member, since 2013-03-13. IPv6 LAN: 2001:7f8:46:0:1:0:4:1427. Locations: lj_tpl.

  • rs1-lan1-ipv6 → 2001:7f8:46:0:1:0:4:1427 Established (loc: lj_tpl, since 2026-09-18)
  • rs2-lan1-ipv6 → 2001:7f8:46:0:1:0:4:1427 Established (loc: lj_tpl, since 2026-08-24)

Announces via SIX route servers: 1 prefix(es) - 2001:678:cc8::/48

RPKI & ASPA

0 of 1 prefix(es) covered by a valid ROA, 1 not-found.

PrefixRPKI stateReasonCovering VRP(s)
2001:678:cc8::/48- not-foundno covering VRP

Random-IP probe (yarrp) into the AS' prefixes

At least one router inside AS41427's announced prefix replied during the random-target probe. Hop(s): 2001:678:cc8:ffff::5. These are candidate targets for direct testing.

ICMPv6 Type 2 (Packet Too Big) acceptance - active test

Type 2 honored. Forged ICMPv6 PTB (MTU=1280) was accepted by the destination's stack: the next 1500-byte Echo Reply arrived split into 2 fragments via the IPv6 Fragment Header.
method: ICMPv6 Echo + forged PTB, tested 2026-09-23T10:31:50Z

Where the path divergence is

Per-vantage probe + verdict (headline):

Full per-method matrix (all four methods run at each vantage):

vantageicmp6-echodns-tcptlshttp
belgradehonoredinconclusivenot_honoredinconclusive
berlinhonoredinconclusivenot_honoredinconclusive
duseldorfhonoredinconclusivenot_honoredinconclusive
go6labhonoredinconclusivenot_honoredinconclusive
karsolinkhonoredinconclusivenot_honoredinconclusive
odinhonoredinconclusivepartialinconclusive
t2honoredinconclusivenot_honoredinconclusive

✓ All vantages agree on method(s): icmp6-echo - the headline-method spread above is dispatcher noise, not a real Type 2 disagreement.

These vantage-level disagreements are rooted somewhere in the forward paths. Joining each per-vantage traceroute against the IP→AS lookup from our global yarrp mesh, the first hop where the paths land in different ASes is the most likely site of the offending filter / unreachable AS / Type 2 drop.

Suspect transit ASes (ranked by how often they appear at the divergence point on the path of the worse-classifying vantage): AS41427, AS3356, AS174.

Diagnosis is path-level, not packet-level: it tells you which transit AS is the prime suspect, not exactly which firewall rule is to blame. Use the tracepath6 output below (when available) for per-hop PMTU evidence on the same path.

Diagnostic interpretation

An operator-targeted diagnostic interpretation can be generated for this AS on demand. The pipeline holds the raw verdicts and the per-hop walk; an AI pass synthesises where to start looking. Click the button below to run it.

Multi-vantage path map

Every hop of all vantages’ traceroutes toward the target, drawn left→right, grouped into per-AS bubbles (a hop seen from several vantages is one shared bubble, so converging paths merge). It answers two questions per vantage — shown on each source bubble as echo ✓/⚠/✗ · trace ✓/✗: did the destination reply to ICMPv6 Echo (✓ honored, ⚠ replied but PTB not honored, ✗ no reply), and did the traceroute reach it. A line to the target is drawn only when that vantage got an echo reply — solid if the PTB was honored, dashed if not (reachable but a broken-PMTUD / RFC 4890 violation). The path depth still shows how far the traceroute itself got, and runs of unanswered (* *) hops collapse into one dashed “silent” bubble. Open full size ↗

multi-vantage path diagram for AS41427

From SRB host (SOX, Belgrade)   openRFC 4890 ✓

filter likely at: (none) · min PMTU on path: 1500

4/4
Echo small (56B) 54.0ms
4/4
Echo 1500B (DF) 54.1ms
yes
Type 1 dest-unreach
443,80
TCP responds on

Path (traceroute + mtr + PTR)

#IP / PTRRTTmtr lossASAS holder
12a09:ab81::10.2ms0%*AS60733PERKE-NET - ZORAN PEROVIC trading as Agencija Perke.NET, RS
2sox-pn.sox.rs
2001:7f8:1e:8::3a
0.3ms0%AS13004SOX - Serbian Open Exchange DOO, RS
32001:7f8:1e:8::3d0.6ms0%AS13004SOX - Serbian Open Exchange DOO, RS
4*-0%-
52001:678:cc8:2:800054.1ms0%-

tracepath -6

 1?: [LOCALHOST]                        0.011ms pmtu 1500
 1:  _gateway                                              0.566ms 
 1:  _gateway                                              0.532ms 
 2:  sox-pn.sox.rs                                         0.383ms 
 3:  2001:7f8:1e:8::3d                                     0.669ms asymm  2 
 4:  2001:67c:128c::699                                   20.249ms 
 5:  no reply
 6:  no reply
 7:  no reply
 8:  no reply
 9:  no reply
10:  no reply
11:  no reply
12:  no reply
13:  no reply
14:  no reply
15:  no reply
16:  no reply
17:  no reply
18:  no reply
19:  no reply
20:  no reply
     Too many hops: pmtu 1500
     Resume: pmtu 1500 

From DE host (Berlin)   openRFC 4890 ✓

filter likely at: (none) · min PMTU on path: 1500

4/4
Echo small (56B) 36.4ms
4/4
Echo 1500B (DF) 36.6ms
yes
Type 1 dest-unreach
443,80
TCP responds on

Path (traceroute + mtr + PTR)

#IP / PTRRTTmtr lossASAS holder
1xe-0-0-13-178.gw01.ber01.as59645.net
2a06:d1c1:100:b::1
0.2ms0%*AS59645WYBT-NET - Tobias Fiebig, DE
2ae0-2453.cr10.ber01.lwlcom.net
2a06:d1c0::dead:beef:1c02
0.6ms0%*AS59645WYBT-NET - Tobias Fiebig, DE
3ae0-150.cr10.fra01.lwlcom.net
2a00:c380:b200:230::174
10.0ms0%AS50629LWLCOM - LWLcom GmbH, DE
4ae0-20.cr10.fra07.lwlcom.net
2a00:c380:b200:230::31
10.1ms0%AS50629LWLCOM - LWLcom GmbH, DE
5*-60%-
6lo0.0.bar1.Ljubljana1.level3.net
2001:4c08::53
32.6ms0%AS3356LEVEL3 - Level 3 Parent, LLC, US
72001:1900:5:2:2::5f1235.6ms0%AS3356LEVEL3 - Level 3 Parent, LLC, US
82001:678:cc8:ffff::536.3ms0%AS41427marc-net_AS - marc-net_AS, SI
92001:678:cc8:2:800036.3ms0%-

Rate-limited ICMPv6: hop 5 (loss between 5% and 95% across mtr cycles - the router replies but only sometimes).

tracepath -6

 1?: [LOCALHOST]                        0.014ms pmtu 1500
 1:  xe-0-0-13-178.gw01.ber01.as59645.net                  0.690ms 
 1:  xe-0-0-13-178.gw01.ber01.as59645.net                  0.510ms 
 2:  ae0-2453.cr10.ber01.lwlcom.net                        1.080ms 
 3:  ae0-150.cr10.fra01.lwlcom.net                        21.337ms asymm  7 
 4:  ae0-20.cr10.fra07.lwlcom.net                         10.399ms asymm  6 
 5:  no reply
 6:  lo0.0.bar1.Ljubljana1.level3.net                     32.334ms asymm  7 
 7:  2001:1900:5:2:2::5f12                                35.863ms asymm 16 
 8:  2001:678:cc8:ffff::5                                 45.798ms asymm 17 
 9:  no reply
10:  no reply
11:  no reply
12:  no reply
13:  no reply
14:  no reply
15:  no reply
16:  no reply
17:  no reply
18:  no reply
19:  no reply
20:  no reply
     Too many hops: pmtu 1500
     Resume: pmtu 1500 

From DE host (Düsseldorf)   openRFC 4890 ✓

filter likely at: (none) · min PMTU on path: 1500

4/4
Echo small (56B) 30.4ms
4/4
Echo 1500B (DF) 30.6ms
yes
Type 1 dest-unreach
443,80
TCP responds on

Path (traceroute + mtr + PTR)

#IP / PTRRTTmtr lossASAS holder
1*-0%*-
2eth1-0-12-h5594.edge5-dus1.bb.wiit.network
2001:4ba0:92f4:3::1
4.0ms0%AS24961MYLOC-AS - WIIT AG, DE
3lag13.agr3-dus3.bb.wiit.network
2001:4ba0:ffe9:7d::1
2.3ms0%AS24961MYLOC-AS - WIIT AG, DE
4lag30.core3-dus1.bb.wiit.network
2001:4ba0:ffe9:109::2
0.2ms0%AS24961MYLOC-AS - WIIT AG, DE
5*-0%-
6lo0.0.bar1.Ljubljana1.level3.net
2001:4c08::53
25.8ms0%AS3356LEVEL3 - Level 3 Parent, LLC, US
72001:1900:5:2:2::5f1229.7ms0%AS3356LEVEL3 - Level 3 Parent, LLC, US
82001:678:cc8:ffff::529.9ms0%AS41427marc-net_AS - marc-net_AS, SI
92001:678:cc8:2:800030.0ms0%-

tracepath -6

 1?: [LOCALHOST]                        0.012ms pmtu 1500
 1:  xe-0-0-12-142.gw01.dus01.as59645.net                  0.369ms 
 1:  xe-0-0-12-142.gw01.dus01.as59645.net                  0.343ms 
 2:  eth1-0-12-h5594.edge5-dus1.bb.wiit.network            1.225ms 
 3:  no reply
 4:  lag30.core3-dus1.bb.wiit.network                      0.441ms 
 5:  no reply
 6:  lo0.0.bar1.Ljubljana1.level3.net                     26.177ms 
 7:  2001:1900:5:2:2::5f12                                30.046ms asymm 15 
 8:  2001:678:cc8:ffff::5                                 33.722ms asymm 16 
 9:  no reply
10:  no reply
11:  no reply
12:  no reply
13:  no reply
14:  no reply
15:  no reply
16:  no reply
17:  no reply
18:  no reply
19:  no reply
20:  no reply
     Too many hops: pmtu 1500
     Resume: pmtu 1500 

From NL host (go6lab)   openRFC 4890 ✓

filter likely at: (none) · min PMTU on path: 1500

4/4
Echo small (56B) 135.4ms
4/4
Echo 1500B (DF) 30.7ms
yes
Type 1 dest-unreach
443,80
TCP responds on

Path (traceroute + mtr + PTR)

#IP / PTRRTTmtr lossASAS holder
12a00:8642:42::22.4ms0%AS203993GNA-DC1-AS - S.J.M. Steffann, NL
2gw.friends.steffann.nl
2a00:8642:1000:f000::1
3.1ms0%*AS203993GNA-DC1-AS - S.J.M. Steffann, NL
32a00:1ca8:1::1942.6ms0%AS50673Serverius-as - Serverius Holding B.V., NL
42a03:3f40::10:413.7ms0%AS50673Serverius-as - Serverius Holding B.V., NL
52001:978:2:40::3:13.6ms0%AS174COGENT-174 - Cogent Communications, LLC, US
6be3458.ccr42.ams03.atlas.cogentco.com
2001:550:0:1000::9a36:27b9
5.6ms0%AS174COGENT-174 - Cogent Communications, LLC, US
7be3343.ccr41.fra05.atlas.cogentco.com
2001:550:0:1000::9a36:3e8d
14.0ms0%AS174COGENT-174 - Cogent Communications, LLC, US
8be5516.ccr21.muc03.atlas.cogentco.com
2001:550:0:1000::9a36:3e7a
17.5ms0%AS174COGENT-174 - Cogent Communications, LLC, US
9be9456.ccr82.vie01.atlas.cogentco.com
2001:550:0:1000::9a36:3f8d
22.4ms20%AS174COGENT-174 - Cogent Communications, LLC, US
10be7244.agr62.vie01.atlas.cogentco.com
2001:550:0:1000::9a36:276e
23.0ms0%AS174COGENT-174 - Cogent Communications, LLC, US
11be9461.rcr62.lju01.atlas.cogentco.com
2001:550:0:1000::9a36:48a2
28.8ms0%AS174COGENT-174 - Cogent Communications, LLC, US
12be9462.nr61.b021176-0.lju01.atlas.cogentco.com
2001:550:0:1000::9a19:11a5
29.6ms0%AS174COGENT-174 - Cogent Communications, LLC, US
132001:978:2:39::6:230.0ms0%AS174COGENT-174 - Cogent Communications, LLC, US
142001:678:cc8:ffff::528.8ms0%AS41427marc-net_AS - marc-net_AS, SI
152001:678:cc8:2:800029.2ms0%-

Rate-limited ICMPv6: hop 9 (loss between 5% and 95% across mtr cycles - the router replies but only sometimes).

tracepath -6

 1?: [LOCALHOST]                        0.041ms pmtu 1500
 1:  2a00:8642:42::2                                       2.593ms 
 1:  ???                                                   1.422ms 
 2:  gw.friends.steffann.nl                                3.710ms 
 3:  2a00:1ca8:1::194                                      6.400ms 
 4:  2a03:3f40::10:41                                      2.125ms 
 5:  2001:978:2:40::3:1                                    4.213ms 
 6:  be3458.ccr42.ams03.atlas.cogentco.com                42.492ms 
 7:  be3343.ccr41.fra05.atlas.cogentco.com                13.127ms 
 8:  be5516.ccr21.muc03.atlas.cogentco.com                17.759ms 
 9:  be9456.ccr82.vie01.atlas.cogentco.com                26.316ms 
10:  be7244.agr62.vie01.atlas.cogentco.com                27.425ms 
11:  be3189.rcr61.lju01.atlas.cogentco.com                31.788ms 
12:  be9462.nr61.b021176-0.lju01.atlas.cogentco.com       30.137ms 
13:  2001:978:2:39::6:2                                   33.548ms 
14:  2001:678:cc8:ffff::5                                 95.825ms 
15:  no reply
16:  no reply
17:  no reply
18:  no reply
19:  no reply
20:  no reply
     Too many hops: pmtu 1500
     Resume: pmtu 1500 

From ITA host (Karsolink)   openRFC 4890 ✓

filter likely at: (none) · min PMTU on path: 1500

4/4
Echo small (56B) 38.0ms
4/4
Echo 1500B (DF) 38.2ms
yes
Type 1 dest-unreach
443,80
TCP responds on

Path (traceroute + mtr + PTR)

#IP / PTRRTTmtr lossASAS holder
1*---
2*-0%*-
32a12:d8c0:109f:106::a23.0ms90%AS204471KARSOLINK - 2S Computers SRL, IT
42a02:2d8:1:b80d:232a7.8ms0%-
5RT.IRX.FKT.DE.retn.net
2a02:2d8::57f5:e0a1
16.2ms80%AS9002RETN-AS - RETN Limited, GB
62001:978:2:2a::e7:111.0ms0%AS174COGENT-174 - Cogent Communications, LLC, US
7lo0.0.bar1.Ljubljana1.level3.net
2001:4c08::53
39.5ms0%AS3356LEVEL3 - Level 3 Parent, LLC, US
82001:1900:5:2:2::5f1237.1ms0%AS3356LEVEL3 - Level 3 Parent, LLC, US
92001:678:cc8:ffff::5127.5ms0%AS41427marc-net_AS - marc-net_AS, SI
102001:678:cc8:2:800038.0ms0%-

Rate-limited ICMPv6: hop 3, hop 5 (loss between 5% and 95% across mtr cycles - the router replies but only sometimes).

tracepath -6

 1?: [LOCALHOST]                        0.028ms pmtu 1500
 1:  no reply
 2:  no reply
 3:  2a12:d8c0:101f:6::1                                   9.937ms 
 4:  2a03:b020:1:51::a                                    10.216ms 
 5:  2a03:b020::246                                       10.397ms 
 6:  no reply
 7:  lo0.0.bar1.Ljubljana1.level3.net                     39.386ms 
 8:  2001:1900:5:2:2::5f12                                37.636ms 
 9:  be5891.ccr21.muc03.atlas.cogentco.com                19.683ms 
10:  be5456.ccr81.vie01.atlas.cogentco.com                25.989ms 
11:  be3935.agr61.vie01.atlas.cogentco.com                25.834ms 
12:  be3189.rcr61.lju01.atlas.cogentco.com                31.671ms 
13:  no reply
14:  2001:978:2:39::6:2                                   28.907ms asymm  8 
15:  2001:678:cc8:ffff::5                                 36.186ms asymm  9 
16:  no reply
17:  no reply
18:  no reply
19:  no reply
20:  no reply
     Too many hops: pmtu 1500
     Resume: pmtu 1500 

From SLO host (6connect)   openRFC 4890 ✓

filter likely at: (none) · min PMTU on path: 1500

4/4
Echo small (56B) 1.4ms
4/4
Echo 1500B (DF) 1.5ms
yes
Type 1 dest-unreach
443,80
TCP responds on

Path (traceroute + mtr + PTR)

#IP / PTRRTTmtr lossASAS holder
1fw1-lju.6connect.com
2607:fae0:a000::2
0.3ms0%*AS80386CONNECT - 6connect, Inc., US
2*---
3*-20%-
4six2.metronet.si @SIX
2001:7f8:46:0:1:0:4:1427
0.9ms0%AS51988ARNES-SIX - ARNES, SI
52001:678:cc8:ffff::59.4ms0%AS41427marc-net_AS - marc-net_AS, SI
6*-0%-
7*---
8*---
9*---
10*---
11*---
12*---
13*---
14*---
15*---
16*---
17*---
18*---
19*---
20*---
21*---

Rate-limited ICMPv6: hop 3 (loss between 5% and 95% across mtr cycles - the router replies but only sometimes).

tracepath -6

 1?: [LOCALHOST]                        0.015ms pmtu 9000
 1:  fw1-lju.6connect.com                                  0.639ms 
 1:  fw1-lju.6connect.com                                  0.668ms 
 2:  no reply
 3:  2a03:a100:0:201:1::1                                  1.038ms 
 4:  2a03:a100:0:201:1::1                                  1.085ms pmtu 1500
 4:  six2.metronet.si                                      1.365ms asymm  5 
 5:  2001:678:cc8:ffff::5                                 26.807ms asymm  6 
 6:  no reply
 7:  no reply
 8:  no reply
 9:  no reply
10:  no reply
11:  no reply
12:  no reply
13:  no reply
14:  no reply
15:  no reply
16:  no reply
17:  no reply
18:  no reply
19:  no reply
20:  no reply
21:  no reply
     Too many hops: pmtu 1500

From SLO host (T-2)   openRFC 4890 ✓

filter likely at: (none) · min PMTU on path: 1500

4/4
Echo small (56B) 2.5ms
4/4
Echo 1500B (DF) 2.9ms
yes
Type 1 dest-unreach
443,80
TCP responds on

Path (traceroute + mtr + PTR)

#IP / PTRRTTmtr lossASAS holder
1*-0%*-
22a01:260:1::2252.1ms0%*AS34779T-2-AS - T-2, d.o.o., SI
32a01-260-1-1--9c.core6.t-2.net
2a01:260:1:1::9c
1.9ms0%*AS34779T-2-AS - T-2, d.o.o., SI
4six2.metronet.si @SIX
2001:7f8:46:0:1:0:4:1427
2.2ms0%AS51988ARNES-SIX - ARNES, SI
52001:678:cc8:ffff::511.4ms0%AS41427marc-net_AS - marc-net_AS, SI
62001:678:cc8:2:80002.2ms0%-

tracepath -6

 1?: [LOCALHOST]                        0.028ms pmtu 1500
 1:  2a01:261:313:b814::1                                  1.267ms 
 1:  2a01:261:313:b814::1                                  1.362ms 
 2:  2a01:260:1::225                                       5.157ms 
 3:  2a01-260-1-1--9a.core6.t-2.net                        3.370ms 
 4:  six2.metronet.si                                     31.613ms 
 5:  2001:678:cc8:ffff::5                                  3.192ms 
 6:  no reply
 7:  no reply
 8:  no reply
 9:  no reply
10:  no reply
11:  no reply
12:  no reply
13:  no reply
14:  no reply
15:  no reply
16:  no reply
17:  no reply
18:  no reply
19:  no reply
20:  no reply
     Too many hops: pmtu 1500
     Resume: pmtu 1500