Routerboard.com (Mikrotikls SIA / MikroTik) — 22 prefixes (MA-L)

"Routerboard.com" is the IEEE OUI registrant name behind MikroTik, the Latvian networking-hardware maker whose legal entity is SIA "Mikrotīkls" (also written Mikrotikls SIA). The brand traces to MikroTik's RouterBOARD product line — low-power single-board routers running RouterOS, introduced in 2002 — and the domain routerboard.com today 301-redirects to mikrotik.com/products, confirming it is a legacy brand alias rather than a separate company. The registrant holds 22 MA-L (24-bit) OUI blocks in the cached IEEE registry, all addressed to Riga, Latvia. Any device on one of these prefixes is almost certainly a MikroTik router, switch (CRS/CSS), wireless access point, or LTE/IoT gateway running RouterOS or SwitchOS. This vendor carries an unusually heavy threat-intelligence footprint: MikroTik devices were the core of the Meris DDoS botnet (2021, ~22M RPS), were among the hardware swept up by VPNFilter (2018), and remain widely exploited through CVE-2023-30799 (tens of thousands still exposed in 2025) and several 2025 RouterOS/SwitchOS CVEs, plus the late-2024 "Mikro Typo" malspam campaign that hijacked ~13,000 routers. The recurring root cause is set-and-forget deployments with management interfaces exposed to the internet and no auto-update — so a Routerboard.com OUI on an internet-facing host is a meaningful asset-classification and attack-surface signal.

IEEE assignment

22 prefixes → Routerboard.com, registered Riga, Latvia [Confirmed] — IEEE MA-L

Registry / block size

MA-L (24-bit OUI); 22 IEEE prefixes (~369M addresses); no MA-M or MA-S blocks for this org [Confirmed] — the IEEE MA-L registry; maclookup.app/vendors/routerboard-com (third-party prefix count is a current snapshot and drifts). NOTE: IEEE's public OUI data publishes NO assignment/registration date; any "date registered" (e.g. third-party tools cite 2003-02-07) is a database artifact, not an IEEE fact.

Legal entity

SIA "Mikrotīkls" / Mikrotikls SIA (the company behind the MikroTik brand) [Confirmed] — en.wikipedia.org/wiki/MikroTik; mikrotik.com/aboutus

HQ / country

Riga, LV LV-1009, Latvia (registry address; one older block lists Pernavas 46, Riga) [Confirmed] — the IEEE MA-L registry; en.wikipedia.org/wiki/MikroTik

Company status

active [Confirmed] — mikrotik.com

Company founded

1996 (Riga, Latvia); RouterBOARD hardware line introduced 2002 [Confirmed] — en.wikipedia.org/wiki/MikroTik

Device types

routers (RouterBOARD), switches (CRS/CSS series), wireless access points, LTE/5G CPE, IoT gateways — running RouterOS / SwitchOS [Confirmed] — mikrotik.com/products; en.wikipedia.org/wiki/MikroTik

Vendor site

routerboard.com returns HTTP 301 → mikrotik.com/products (legacy brand alias) [Confirmed] — https://routerboard.com

Verified sample prefixes (all MA-L, Routerboard.com)

00:0C:42, 08:55:31, B8:69:F4, 18:FD:74, CC:2D:E0, 04:F4:1C [Confirmed] — the IEEE MA-L registry

Security context

MikroTik/RouterBOARD devices have a large, active threat profile — Meris botnet (2021), VPNFilter (2018), CVE-2023-30799 (~131k still exposed early 2025), CVE-2025-61481 / CVE-2025-10948 / CVE-2025-6443 (RouterOS/SwitchOS), and the "Mikro Typo" malspam campaign (~13k routers, late 2024). Root cause: set-and-forget configs, no auto-update, management ports internet-exposed.

[Confirmed] — thehackernews.com/2025/01/13000-mikrotik-routers-hijacked-by.html; mikrotik.com/supportsec; bleepingcomputer.com

Analyst note

A Routerboard.com OUI reliably identifies genuine MikroTik hardware for asset classification; on an internet-facing host it is also a useful attack-surface signal given the device family's exploitation history. OUI alone does not indicate patch level or compromise.