s BGP boring? Well...it depends. But a few quick observations we've made recently:
1. Several /24 IP blocks with consistent RPKI/IRR flips between a Romanian ASN, half a dozen Iranian ASNs, and another handful of shell ASNs in EU and NA in order to launder transit from sanctioned IP space.