Reply to comment:

Alex Band
The ARIN RPKI system is the only one that has kind of OpenSSL key signing to create ROAs. RIPE NCC members who would like to create ROAs just need to have the appropriate rights, as described here: http://ripe.net/certification/enable