it depends, let's encrypt might be performing request from different sources (and then it would need a bigger BGP hijack to fake them)
This occasionally annoys people who have an idea like "I will firewall everything but whitelist Let's Encrypt" and then find out that while you're welcome to try to puzzle out some way to make this work, Let's Encrypt won't help you and when it breaks you get to keep both halves.