diff --git a/.gitignore b/.gitignore
index 36c1a34..a7f71ea 100644
--- a/.gitignore
+++ b/.gitignore
@@ -18,3 +18,4 @@
 /certbot-dns-luadns-0.37.2.tar.gz
 /certbot-dns-luadns-0.38.0.tar.gz
 /certbot-dns-luadns-0.39.0.tar.gz
+/certbot-dns-luadns-0.39.0.tar.gz.asc
diff --git a/gpg-A2CFB51FA275A7286234E7B24D17C995CD9775F2.gpg b/gpg-A2CFB51FA275A7286234E7B24D17C995CD9775F2.gpg
new file mode 100644
index 0000000..013feed
Binary files /dev/null and b/gpg-A2CFB51FA275A7286234E7B24D17C995CD9775F2.gpg differ
diff --git a/python-certbot-dns-luadns.spec b/python-certbot-dns-luadns.spec
index 485433d..b540fb7 100644
--- a/python-certbot-dns-luadns.spec
+++ b/python-certbot-dns-luadns.spec
@@ -14,12 +14,19 @@
 
 Name:           python-%{pypi_name}
 Version:        0.39.0
-Release:        1%{?dist}
+Release:        2%{?dist}
 Summary:        LuaDNS Authenticator plugin for Certbot
 
 License:        ASL 2.0
 URL:            https://github.com/certbot/certbot
-Source0:        https://files.pythonhosted.org/packages/source/c/%{pypi_name}/%{pypi_name}-%{version}.tar.gz
+Source0:        %{pypi_source}
+Source1:        %{pypi_source}.asc
+# Key mentioned in https://certbot.eff.org/docs/install.html#certbot-auto
+# Keyring generation steps as follows:
+#   gpg2 --keyserver pool.sks-keyservers.net --recv-key A2CFB51FA275A7286234E7B24D17C995CD9775F2
+#   gpg2 --export --export-options export-minimal A2CFB51FA275A7286234E7B24D17C995CD9775F2 > gpg-A2CFB51FA275A7286234E7B24D17C995CD9775F2.gpg
+Source2:        gpg-A2CFB51FA275A7286234E7B24D17C995CD9775F2.gpg
+
 BuildArch:      noarch
 
 %if %{with python2}
@@ -43,6 +50,9 @@ BuildRequires:  python3-setuptools
 BuildRequires:  python3-zope-interface
 %endif
 
+# Used to verify OpenPGP signature
+BuildRequires:  gnupg2
+
 %description
 LuaDNS Authenticator plugin for Certbot
 
@@ -95,6 +105,7 @@ Documentation for certbot-dns-luadns
 %endif
 
 %prep
+%{gpgverify} --keyring='%{SOURCE2}' --signature='%{SOURCE1}' --data='%{SOURCE0}'
 %autosetup -n %{pypi_name}-%{version}
 # Remove bundled egg-info
 rm -rf %{pypi_name}.egg-info
@@ -151,6 +162,9 @@ rm -rf html/.{doctrees,buildinfo}
 %endif
 
 %changelog
+* Wed Dec 04 2019 Eli Young <elyscape@gmail.com> - 0.39.0-2
+- Verify source OpenPGP signature
+
 * Tue Oct 01 2019 Eli Young <elyscape@gmail.com> - 0.39.0-1
 - Update to 0.39.0 (#1757583)
 
diff --git a/sources b/sources
index 22c40b2..ae063f1 100644
--- a/sources
+++ b/sources
@@ -1 +1,2 @@
 SHA512 (certbot-dns-luadns-0.39.0.tar.gz) = 0b649403566f58e40d824fea3573c514cf3b39f3b1d86d2bfaead27128b544ea6b305250b571446facf58d5885d7d974369aaac2c17af1e44b56cb7c35b4e1f8
+SHA512 (certbot-dns-luadns-0.39.0.tar.gz.asc) = 377a9ed04b01e835d7f8b50df2f97d2b88ae4f19d39b1449c8f63ddd92d118f6307f9d703375a5d9b25a4e8394936dd9b6d0f4fcafa0151864c684654c33e71c