What it does
rpki-client validates global RPKI repository data and outputs validated ROA payloads and router keys in routing-stack or CSV and JSON formats.
Configure the trust anchors, synchronize repository data, and select the validated output your routing stack consumes. rpki-client supports OpenBGPD, BIRD, CSV and JSON, with cache and output directories under operator control. Its offline mode validates the cache without fetching fresh repository state, so keep the validation time and freshness with the result. The current OpenBSD manual targets BIRD 2.16 or later for its fuller output and documents a compatibility option for older versions. It also excludes AS0 trust anchors from normal output by default. Validation supplies routing-policy data; it does not itself prove end-to-end reachability. The project is ISC-licensed, with OpenBSD and portable releases.
Strengths
- Routing-stack and machine-readable output formats
Sources
- rpki-client (Oct 26, 2026)
- rpki-client OpenBSD-current manual (Oct 26, 2026)