Hi, To save people from having to jump through hoops to figure out how to use this facility, here is a simple shell script that shows generation and publication of a BGPsec router key using RIPE NCC's API. Kind regards, Job -------------------------------------- #!/bin/sh set -euxo pipefail AS=YOUR_AS_NUMBER APIKEY="44444444-4444-4444-4444-444444444444" API="https://my.ripe.net/api/rpki/bgpsec" cat << EOF > bgpsec.cnf [ req ] distinguished_name = cnname string_mask = nombstr prompt = no [ cnname ] commonName = ROUTER-${AS} EOF openssl ecparam -genkey -name prime256v1 -out r0.key openssl req -new -key r0.key -sha256 -outform DER -out r0.csr -config bgpsec.cnf cat << EOF > data.json { "asn": "AS${AS}", "routerId": 0, "csr": "$(cat r0.csr | openssl base64 | tr -d '\n')" } EOF curl --data @data.json -v -X POST -H "Content-Type: application/json" \ -H "ncc-api-authorization: ${APIKEY}" \ ${API}