You can create a ROA via RIPE‘s LIR portal in a few simple steps.

1. Log in to

2. Click Resources – My Resources on the left.

3. Check the IP resources you want to be covered by the ROA.

4. Click Resources – RPKI Dashboard.

RIPE NCC can create Certificate Authority for your LIR. Read the Terms and Conditions carefully in Article 2, and if you wish that RIPE NCC manages your ROA, choose the Hosted type of certificate authority.

5. To agree with the Terms and Conditions, click the I accept. Create my Certificate Authority button.

Excerpt from RIPE NCC Certification Service Terms and Conditions document.

Hosted type of certificate authority selected in RIPE's Resources menu.

6. In RPKI Dashboard, click the BGP Announcements tab. Here, you can find all AS numbers that are currently announcing your IP resources. To issue a new ROA, click the Route Origin Authorisations (ROAs) tab and click +New ROA.

Route Origin Authorizations (ROAs) tab without ROAs in the RPKI Dashboard.

7. Enter the following information:

  • AS number that announces your IP resources via BGP (IPXO's ASN is 834)
  • Prefix that you want to be announced
  • The most specific prefix length, which must be set to 24 to ensure that we can announce the most specific prefixes
ROAs tab with AS number, prefix and most specific length in the RPKI Dashboard.

8. Click Save (floppy disk icon) to create and save your ROA.

9. To publish the ROA, click the Review and publish changes pop-up and then click Publish.

Review and publish changes pop-up in RIPE's RPKI Dashboard.

Learn more