UAV Ad hoc Network (UAANET) is a wireless ad hoc network composed of Unmanned Aerial Vehicles (UAVs) and Ground Control Station (GCS). It requires an efficient and secure routing protocols to find accurate and secure route between nodes to exchange data traffics. There have been several secure routing proposals to ensure data authentication and integrity services of ad hoc routing protocols. However, most of them are vulnerable against wormhole attacks and therefore cannot be used for UAANET directly without amendment. The wormhole attack involves two attackers who perform a colluding attack.In this paper, we present a new UAANET secure routing protocol called SUAP (Secure Uav Ad hoc routing Protocol). It ensures message authentication and provides detection and prevention of wormhole attacks. SUAP is a reactive protocol using public key cryptography, hash chains and geographical leashes. We have carried out a formal verification analysis of SUAP security properties using the AVISPA tool, an automated model checker for the analysis of security features. We have also validated our security proposal through formal model checking using Simulink and Stateflow tools. Additionally, we use a hybrid experimental system (based on virtual machines and a virtual mesh framework) under a realistic UAANET scenario to evaluate SUAP routing performances and validate its security properties.Index Terms-UAV Ad hoc NETwork, Security Architecture, AVISPA, Model Driven Development, Routing Protocol.