CVE-2021-41531: Nlnetlabs Routinator

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

NLnet Labs Routinator prior to 0.10.0 produces invalid RTR payload if an RPKI CA uses too large values in the max-length parameter in a ROA. This will lead to RTR clients such as routers to reject the RPKI data set, effectively disabling Route Origin Validation.

Affected products

• Nlnetlabs Routinator: before 0.10.0 (fixed in 0.10.0)

Published 2021-09-21. Last modified 2026-06-17.