diff --git a/apps/routerconsole/java/src/net/i2p/router/web/helpers/NetDbRenderer.java b/apps/routerconsole/java/src/net/i2p/router/web/helpers/NetDbRenderer.java
index b8576c0b94..b06166e6e2 100644
--- a/apps/routerconsole/java/src/net/i2p/router/web/helpers/NetDbRenderer.java
+++ b/apps/routerconsole/java/src/net/i2p/router/web/helpers/NetDbRenderer.java
@@ -311,7 +311,10 @@ class NetDbRenderer {
             Destination dest = ls.getDestination();
             Hash key = dest.calculateHash();
             buf.append("<table class=\"leaseset\">\n")
-               .append("<tr><th><b>").append(_t("LeaseSet")).append(":</b>&nbsp;<code>").append(key.toBase64()).append("</code></th>");
+               .append("<tr><th><b>").append(_t("LeaseSet")).append(":</b>&nbsp;<code>").append(key.toBase64()).append("</code>");
+            if (_context.keyRing().get(key) != null)
+                buf.append(" (").append(_t("Encrypted")).append(')');
+            buf.append("</th>");
             if (_context.clientManager().isLocal(dest)) {
                 buf.append("<th><a href=\"tunnels#" + key.toBase64().substring(0,4) + "\">" + _t("Local") + "</a> ");
                 boolean unpublished = ! _context.clientManager().shouldPublishLeaseSet(key);