What is the recommended file extension for GnuPG-encrypted files?

.asc is appropriate for all ASCII-armored output, even if the input file was in a binary format. Traditionally the original filename will be maintained so that the recipient knows what to expect once they've decrypted the file, e.g., file.tar.gz.asc.