The process of creating ROAs through each RIR portal

This page shares links to quickly find instructions to set up RPKI in hosted mode and create ROAs across all five RIRs. It also includes an overview of the differences between the RIRs in setting up RPKI and creating ROAs, which is useful if you are a resource holder across multiple RIRs.

Last updated: Sep 2025

Where to find instructions to create a ROA

How to enable RPKI in Hosted mode and create a ROA across the RIRs:

If you need support:

Differences across RIRs

Do you hold resources across different RIRs? While the core processes behind enabling RPKI and creating a ROA are similar across the RIRs, there are some differences in the terms used and steps required.

This table of differences will help you get an overview of the differences in terminology and processes.

Element AFRINIC APNIC ARIN LACNIC RIPE NCC
RPKI-related section in portal Resource Certification RPKI, Route Management Routing Security [Org]/Services/RPKI RPKI Dashboard
Vocabulary used to refer to enabling RPKI/td>

Activate Engine Activate RPKI engine Sign up for RPKI N/A (No explicit mechanism to enable RPKI. RPKI in hosted mode is enabled implicitly on creation of the first ROA.) Create Certification Authority
Vocabulary used to refer to creating a ROA Issue ROAs Add new (Routes) Create ROA Create ROA Create ROA
Fields in ROA creation form
  • ROA name (optional)
  • Origin AS
  • List of IPv4 prefixes with max length
  • List of IPv6 prefixes with max length
  • ROA validity start date
  • ROA expiry date
  • Prefix
  • Origin AS
  • Max length
  • ROA (checkbox) (Must be selected to create a ROA)
  • Whois

    – Enabled (checkbox) (To create route object)
    – Define Whois route attributes (checkbox)

  • Options – Notify additional contacts (checkbox)
  • Origin AS
  • Prefixe(s)
  • Max Length
  • ROA name (Optional)
  • Prefix/Length
  • Maximum length
  • ASN
  • Origin AS
  • Prefix
  • Max Length
Suggestions offered Origin AS and prefixes can be selected from drop-down menus Prefix field shows possible prefixes once user starts typing.

Warning when not using max length (User can go back and make changes or click OK and go ahead)

 None List of authorised prefixes (with max length) included automatically as comments (with #) in text fields BGP announcements with validity status are shown for the prefixes held by the organisation (BGP Announcements tab).

Effect on announcements can be shown for each ROA (ROA tab).

Exact matching ROAs can be created for announcements.
Verification before/after creation of a ROA After Before Before Before Before
Warning about invalidation of BGP announcements No Yes (Warning and option to adjust) No No (But number of changes in validation status caused by a new ROA are shown) Yes (User has to type INVALID to confirm)

Last modified on 22/09/2025