The OpenBSD project has released the first portable version of rpki-client

OpenBSD developers have published the first public release of the portable edition of the package rpki-client with the implementation of the RPKI (Resource
Public Key Infrastructure) mechanism for RP (Relying Parties), used for the authorization of BGP announcement sources. RPKI allows determining whether a BGP announcement comes from the network owner or not, for which a trust chain is built using public key infrastructure for autonomous systems and IP addresses, extending from IANA to regional registries (RIRs), providers (LIR), and end-users of addresses. The code is published under the BSD license.

Program rpki-client allows sending a request to the RPKI repository and generating a VRP (Validated ROA Payload) object, confirming the route source (ROA, Route Origin Authorization) in routing configuration format OpenBGPD and BIRD, as well as in CSV or JSON formats for use in other routing stacks. The utility openrsync, is used to access the repository, extracting all X.509 certificates, manifests, and certificate revocation lists. Then
rpki-client checks each certificate associated with the ROA, constructing and verifying the entire trust chain while evaluating the CRL lists for potential certificate revocations.

Source: opennet.ru