# Error when trying to run rpki validator

**URL:** <https://forum.ripe.net/t/error-when-trying-to-run-rpki-validator/453>\
**Category:** Uncategorized\
**Tags:** rpki\
**Created:** [28 April 2023 07:22 UTC](https://forum.ripe.net/t/error-when-trying-to-run-rpki-validator/453 "2023-04-28T07:22:13Z")\
**Posts on this page:** 12\
**Page:** 1

<div class="post-metadata">

**Author:** ![Baptiste](https://avatars.discourse-cdn.com/v4/letter/b/cab0a1/32.png) [@Baptiste](https://forum.ripe.net/u/Baptiste)\
**Post date:** [28 April 2023 07:22 UTC](https://forum.ripe.net/t/error-when-trying-to-run-rpki-validator/453/1 "2023-04-28T07:22:13Z")

</div>

Hello,

I want to install rpki validator as a validation software on a debian 11 VM.  
I have installed rpki validator from this site [How to Install an RPKI Validator | RIPE Labs](https://labs.ripe.net/author/tashi_phuntsho_3/how-to-install-an-rpki-validator/). The installation went well but I can’t execute this command: curl -H “Accept: text/csv” localhost:8080/api/export.csv, it gives me curl: (7) Failed to connect to localhost port 8080: Connection refused.  
Is it from my VM or from the installation of rpki-validator which was badly done?

Thank you in advance  
Baptiste

---

<div class="post-metadata">

**Author:** ![ties](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.ripe.net/ties/32/52_2.png) [@ties](https://forum.ripe.net/u/ties)\
**Post date:** [1 May 2023 07:44 UTC](https://forum.ripe.net/t/error-when-trying-to-run-rpki-validator/453/2 "2023-05-01T07:44:03Z")

</div>

Hi Baptitse,

Thanks for your question. These validators can be tricky to run, especially back in 2019 when the article was published.

The article describes the installation of four different RPKI validators. What validator did you install?

The URL/port/API they have to download the validated object content differs for each validator.

If you installed the RIPE NCC RPKI validator, I recommend picking a different one. The RIPE NCC RPKI validator was deprecated; there are better alternatives available.

Kind regards,  
Ties

---

<div class="post-metadata">

**Author:** ![Baptiste](https://avatars.discourse-cdn.com/v4/letter/b/cab0a1/32.png) [@Baptiste](https://forum.ripe.net/u/Baptiste)\
**Post date:** [2 May 2023 06:36 UTC](https://forum.ripe.net/t/error-when-trying-to-run-rpki-validator/453/3 "2023-05-02T06:36:10Z")

</div>

Good morning,

I have installed the RIPE NCC RPKI Validator.  
Is the routinator more recent?  
Best regards  
Baptiste

---

<div class="post-metadata">

**Author:** ![ties](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.ripe.net/ties/32/52_2.png) [@ties](https://forum.ripe.net/u/ties)\
**Post date:** [4 May 2023 10:41 UTC](https://forum.ripe.net/t/error-when-trying-to-run-rpki-validator/453/4 "2023-05-04T10:41:58Z")

</div>

routinator is easy to install and is well maintained.

The RIPE validator has been deprecated. routinator, fort, octorpki, and rpki-client are being maintained.

---

<div class="post-metadata">

**Author:** ![Baptiste](https://avatars.discourse-cdn.com/v4/letter/b/cab0a1/32.png) [@Baptiste](https://forum.ripe.net/u/Baptiste)\
**Post date:** [5 May 2023 12:35 UTC](https://forum.ripe.net/t/error-when-trying-to-run-rpki-validator/453/5 "2023-05-05T12:35:59Z")

</div>

Thank you for your information.  
I have chosen the routinator software to make my RPKI server.  
But I have a question. I’m not sure if I should use TLS or SSH to set up my RTR server.  
[https://routinator.docs.nlnetlabs.nl/en/stable/rtr-service.html](https://routinator.docs.nlnetlabs.nl/en/stable/rtr-service.html)

---

<div class="post-metadata">

**Author:** ![ties](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.ripe.net/ties/32/52_2.png) [@ties](https://forum.ripe.net/u/ties)\
**Post date:** [9 May 2023 14:59 UTC](https://forum.ripe.net/t/error-when-trying-to-run-rpki-validator/453/6 "2023-05-09T14:59:05Z")

</div>

The choice of transport depends on what is supported and how much you trust the network between the router and RTR server. As far as I know the most commonly used methods are plaintext or SSH.

Of course it is important to think about the risks when using plaintext. If you trust the network, this limits the risk of using plaintext. On a less, or non-trusted network (worst, very unlikely case: public wifi) I would really want authentication/security.

---

<div class="post-metadata">

**Author:** ![mrjohnsmith](https://avatars.discourse-cdn.com/v4/letter/m/a8b319/32.png) [@mrjohnsmith](https://forum.ripe.net/u/mrjohnsmith)\
**Post date:** [21 September 2023 09:31 UTC](https://forum.ripe.net/t/error-when-trying-to-run-rpki-validator/453/7 "2023-09-21T09:31:20Z")

</div>

The “Connection refused” error when attempting to access localhost on port 8080 typically suggests that the RPKI Validator service isn’t running or isn’t configured to listen on that port.

To troubleshoot, check the service’s status using systemctl status rpki-validator and start it if it’s not running. Also, inspect the configuration file to confirm that it specifies port 8080. Additionally, ensure that there are no firewall rules or other network-level issues blocking access to the specified port.

If the issue persists, consider reviewing the installation steps and logs for any errors during the RPKI Validator installation on your Debian 11 VM.

---

<div class="post-metadata">

**Author:** ![karsonardo](https://avatars.discourse-cdn.com/v4/letter/k/c0e974/32.png) [@karsonardo](https://forum.ripe.net/u/karsonardo)\
**Post date:** [18 March 2024 09:58 UTC](https://forum.ripe.net/t/error-when-trying-to-run-rpki-validator/453/8 "2024-03-18T09:58:20Z")

</div>

> [@Baptiste](#):
>
> I want to install rpki validator as a validation software on a debian 11 VM.  
> I have installed rpki validator from this [site](https://www.office-hub.com/au/areas/managed-office-space-in-sydney-nsw-australia-a33Qg000002jxfuIAA) [How to Install an RPKI Validator | RIPE Labs]. The installation went well but I can’t execute this command: curl -H “Accept: text/csv” localhost:8080/api/export.csv, it gives me curl: (7) Failed to connect to localhost port 8080: Connection refused.  
> Is it from my VM or from the installation of rpki-validator which was badly done?
> 
> Thank you in advance  
> Baptiste

Following the installation instructions provided on RIPE Labs, the installation appeared to proceed without any errors. Upon attempting to execute the command “curl -H “Accept: text/csv” localhost:8080/api/export.csv,” I consistently receive the error message “curl: (7) Failed to connect to localhost port 8080: Connection refused.” This error has left me puzzled, wondering whether it stems from misconfiguration during the rpki-validator installation process or if there’s an underlying issue with my Debian 11 VM setup.

---

<div class="post-metadata">

**Author:** ![ties](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.ripe.net/ties/32/52_2.png) [@ties](https://forum.ripe.net/u/ties)\
**Post date:** [19 March 2024 04:04 UTC](https://forum.ripe.net/t/error-when-trying-to-run-rpki-validator/453/9 "2024-03-19T04:04:16Z")

</div>

> [@karsonardo](#):
>
> Following the installation instructions provided on RIPE Labs, the installation appeared to proceed without any errors. Upon attempting to execute the command “curl -H “Accept: text/csv” localhost:8080/api/export.csv,” I consistently receive the error message “curl: (7) Failed to connect to localhost port 8080: Connection refused.” This error has left me puzzled, wondering whether it stems from misconfiguration during the rpki-validator installation process or if there’s an underlying issue with my Debian 11 VM setup.

The RIPE NCC RPKI validator is no longer supported. Debian 11 was released after the software support ended, so I think that the compatibility has not been tested.

There are two main causes for the connection being refused:

- The software may not be running
- The port is incorrect

I would recommend you pick an alternative validator over continuing to run the RIPE validator though (unless for research purposes)

---

<div class="post-metadata">

**Author:** ![Ericbejlic](https://avatars.discourse-cdn.com/v4/letter/e/c0e974/32.png) [@Ericbejlic](https://forum.ripe.net/u/Ericbejlic)\
**Post date:** [8 August 2024 17:03 UTC](https://forum.ripe.net/t/error-when-trying-to-run-rpki-validator/453/10 "2024-08-08T17:03:17Z")

</div>

> [@Baptiste](#):
>
> I want to install rpki validator as a validation software on a debian 11 VM.  
> I have installed rpki validator from this site [How to Install an RPKI Validator | RIPE Labs](https://labs.ripe.net/author/tashi_phuntsho_3/how-to-install-an-rpki-validator/). The installation went well but I can’t execute this command: curl -H “Accept: text/csv” localhost:8080/api/export.csv, it gives me curl: (7) Failed to connect to localhost port 8080: Connection refused.  
> Is it from my VM or from the installation of rpki-validator which was badly done?
> 
> Thank you in advance

Have you verified that there are no firewall rules or network restrictions on the VM that might be blocking access to port 8080?

---

<div class="post-metadata">

**Author:** ![Alfredoest](https://avatars.discourse-cdn.com/v4/letter/a/7bcc69/32.png) [@Alfredoest](https://forum.ripe.net/u/Alfredoest)\
**Post date:** [30 September 2024 11:34 UTC](https://forum.ripe.net/t/error-when-trying-to-run-rpki-validator/453/11 "2024-09-30T11:34:02Z")

</div>

> [@Baptiste](#):
>
> I want to install rpki validator as a validation software on a debian 11 VM.  
> I have installed rpki validator from this [site](https://stylo.pk/) How to Install an RPKI Validator | RIPE Labs . The installation went well but I can’t execute this command: curl -H “Accept: text/csv” localhost:8080/api/export.csv, it gives me curl: (7) Failed to connect to localhost port 8080: Connection refused.  
> Is it from my VM or from the installation of rpki-validator which was badly done?

An issue when trying to execute the command `curl -H "Accept: text/csv" localhost:8080/api/export.csv`. The error message I receive is `curl: (7) Failed to connect to localhost port 8080: Connection refused`. I’m unsure whether this issue stems from a misconfiguration on my VM or if the RPKI Validator installation did not complete properly.

---

<div class="post-metadata">

**Author:** ![Bart](https://avatars.discourse-cdn.com/v4/letter/b/f19dbf/32.png) [@Bart](https://forum.ripe.net/u/Bart)\
**Post date:** [30 September 2024 13:46 UTC](https://forum.ripe.net/t/error-when-trying-to-run-rpki-validator/453/12 "2024-09-30T13:46:52Z")

</div>

The RIPE NCC RPKI validator is no longer supported. It is known to be insecure, since maintenance stopped per July 2021.

If you still run this software, we strongly urge you to replace it with another validator. More information is published at: [Ending Support for the RIPE NCC RPKI Validator — RIPE Network Coordination Centre](https://www.ripe.net/about-us/news/ending-support-for-the-ripe-ncc-rpki-validator/)
