That's pretty egregious, why the heck did the romanian upstream peers not just drop them after they started obviously highjacking the /23? I mean you have something that is obviously not just some misconfiguration, if you know that one of your peers is intentionally hijacking some prefix why would you be complacent in being a part of their fraud?