[RPKI] cannot download the .roa files, with the list of signed bgp prefixes

Alex Band alex at nlnetlabs.nl
Fri May 6 09:48:29 UTC 2022

Hi Gabriel,

Contacting the organisations who publish broken ROAs is a noble cause, but ultimately you will have to accept that there will always be some invalid information in the RPKI system. 

Removing a TAL will only make you miss out on important valid information, and gains you nothing.

Kind regards,


> On 5 May 2022, at 22:55, gustvieira99 via RPKI <rpki at lists.nlnetlabs.nl> wrote:
> Hi, how are you? Well, I just got in touch with the AFRINIC entity, about the problem previously reported (validation failure in all files .roa and revoked certificates, preventing the download of ROAs). I haven't had a response yet, but as soon as I do, I'll let you know. Well, as it seems to be just a failure in the AFRINIC repositories, I ended up performing a test, removing the file "afrinic.tal", in order to receive only the ROAs from the other entities that are not having problems (apnic, lacnic, ripe and arin) . But the result was not satisfactory. If you remove the "afrinic.tal" file, the router has another error and continues not to download any ROA. Why does it happen? thank you so much!
> -- 
> RPKI mailing list
> RPKI at lists.nlnetlabs.nl
> https://lists.nlnetlabs.nl/mailman/listinfo/rpki

More information about the RPKI mailing list