Frequently Asked Questions

STIR/SHAKEN (Secure Telephone Identity Revisited / Signature-based Handling of Asserted information using toKENs) is an FCC-mandated framework requiring U.S. voice service providers to cryptographically sign and verify caller ID information. It was enacted to combat robocalling and caller ID spoofing. All telephone service providers must implement STIR/SHAKEN and obtain certificates from an authorized Certificate Authority.

If you are a U.S. voice service provider (VSP) that originates calls on the public switched telephone network (PSTN), yes. The FCC requires all VSPs to implement STIR/SHAKEN. Providers must obtain a Service Provider Code (SPC) token from iConectiv and a certificate from an authorized CA like Telonium to sign calls.

An Operating Company Number (OCN) is a 4-character identifier assigned by NECA (National Exchange Carrier Association) that identifies your organization in the telecommunications industry. Your OCN is required to obtain an SPC token from iConectiv, which in turn is required to receive a STIR/SHAKEN certificate. Each OCN corresponds to a distinct operating entity.

A Service Provider Code (SPC) token is a credential issued by iConectiv (the STIR/SHAKEN Policy Administrator) that authorizes your organization to receive STIR/SHAKEN certificates. You must obtain an SPC token from iConectiv before Telonium can issue you a certificate. Telonium integrates with iConectiv to streamline SPC token verification.

Once your company registration is verified and approved, certificate issuance typically occurs within one business day. The verification process — which confirms your legal entity, OCN ownership, and SPC token — may take additional time depending on the completeness of your registration.

STIR/SHAKEN certificates issued by Telonium have a one-year validity period. Telonium will notify you before expiration, and you can renew certificates directly from the platform. Expired certificates cannot sign calls, so timely renewal is critical for continued FCC compliance.

If your private key is compromised or a certificate needs to be retired, you can request revocation from the Telonium platform. Revoked certificates are published immediately to our Certificate Revocation List (CRL) and OCSP responder, notifying all relying parties. Revocation is permanent — a new certificate will need to be issued.

Yes. Telonium supports multi-OCN environments. You can associate multiple OCNs with your account, and each OCN can have its own subscription plan. This is designed for complex carrier groups, CLECs, and resellers who operate under multiple operating entities.

Telonium pricing is based on your subscription plan, which is associated with your OCNs. Plans are billed monthly or annually. You can view plan options and pricing after completing registration. Volume discounts may be available for carriers managing a large number of OCNs — contact us to discuss.

Attestation levels indicate how confidently a carrier can vouch for the caller. A (Full) attestation means the service provider is responsible for the call and can verify the caller's identity and right to use the number. B (Partial) attestation means the provider knows the customer but cannot verify their right to use the number. C (Gateway) attestation is used when a call arrives at a US gateway from outside the STIR/SHAKEN ecosystem. Telonium certificates enable you to sign calls at any attestation level.

10DLC (10-Digit Long Code) is a carrier-supported messaging standard for A2P (application-to-person) SMS/MMS traffic sent over local 10-digit phone numbers. While distinct from STIR/SHAKEN, both relate to telephone number identity and carrier compliance. Contact us about our capabilities around 10DLC campaign support.

You can cancel your account at any time by contacting [email protected]. Cancellation takes effect immediately, but you retain access through the end of your current billing period. Telonium does not provide refunds for partial billing periods. Note that certificate records must be retained per our Certificate Policy even after account closure.